a9b3e841442545c7ab11da2dcc7946430ded39446fe968ad973b0ffc091b191d

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20251223-en
resource tags

arch:x64arch:x86image:win11-20251223-enlocale:en-usos:windows11-21h2-x64system
submitted
25/12/2025, 21:26

Target
2025-12-25_0b898b6da269c3d65ba2419a09087b59_elex_lockbit_rhadamanthys_stealc_stop.exe
Size 180KB
Sample251225-1ae4msfl6x
SHA256 a9b3e841442545c7ab11da2dcc7946430ded39446fe968ad973b0ffc091b191d
MD5 0b898b6da269c3d65ba2419a09087b59
SHA1 85bd0101293baa16d85fe658cea2c6d1e8f778b8
SHA512 b5da108b4658a1c1f122c4b2f31ecbda9cd3465b12a61ecc15982e8e19e31d1b843519ca9dff176c10c3b9f901e13cc809eed32af67f8ca4303d981c8c22a20d
SSDEEP 3072:UZOvfV+SQ6N/xSG1Q1RieB7gIB4HKm/lgYs+4ylDe:GOPRN/kd1RiehgIBo1nq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5784	2764	WerFault.exe	76

C:\Users\Admin\AppData\Local\Temp\2025-12-25_0b898b6da269c3d65ba2419a09087b59_elex_lockbit_rhadamanthys_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2025-12-25_0b898b6da269c3d65ba2419a09087b59_elex_lockbit_rhadamanthys_stealc_stop.exe"
1⤵
PID:2764
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2764 -s 8
  2⤵
  - Program crash
  PID:5784

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 352 -p 2764 -ip 2764
1⤵
PID:4048