744cc1805ca120055d85133cfb30741abe607bbe4664fae5e6c719cdc016b28d

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 23:28

Target
2026-04-15_c810ae5a0a371531967238792a96664e_amadey_bkransomware_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
Size 4.1MB
Sample260415-3ge4bset21
SHA256 744cc1805ca120055d85133cfb30741abe607bbe4664fae5e6c719cdc016b28d
MD5 c810ae5a0a371531967238792a96664e
SHA1 3a2ab95856ef033c7420a9790fd027a7515885e0
SHA512 9fb1252824fd8330e9f56b39816b30138047678266aeb46a3bb866956c4b8bae4124176f328c5a29f17cd358cefd19a0ca1524a1efa0ce6aa22d76b2c45d60f9
SSDEEP 49152:T5JJ8y5Q1d05JJ8y5Q1d5sNBk9/fw2BwfmM0f/cY/T:V8ZTe8ZT5sNi9Xwgwfo8e
TLSH
T1D416900CED504C21DD1D4E304511AB7DF529AD2FBE2E79876E84798EFAB3FC12526222
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
712	2188	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_c810ae5a0a371531967238792a96664e_amadey_bkransomware_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_c810ae5a0a371531967238792a96664e_amadey_bkransomware_elex_hawkeye_maze_rhadamanthys_smoke-loader.exe"
1⤵
PID:2188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 8
  2⤵
  - Program crash
  PID:712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2188 -ip 2188
1⤵
PID:4028