8ee1bd36a6ef31227caab5832694109c06eccd148457fe6d95c91d2b41fea44d

Analysis

max time kernel
149s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 14:05

Target
2026-04-15_0ed991c8955241a757ca15ed7640d7be_cloudeye_darkgate_elex_maze_rhadamanthys_smoke-loader.exe
Size 1.7MB
Sample260415-rd67vsgv4n
SHA256 8ee1bd36a6ef31227caab5832694109c06eccd148457fe6d95c91d2b41fea44d
MD5 0ed991c8955241a757ca15ed7640d7be
SHA1 83bff283acb48f1a60b06c78f4a0ca95a128fb06
SHA512 fa9ae3c8cd5d9a0ac1307bbdccf3641a1380a8d497cbd8cfe41e0d86475012e7aff9daf110d93a4e3a776fbc16bc267a99084e7d36cdccbcb399520e370b8c31
SSDEEP 49152:hA0vbHC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzld:hAOm+RYNAKvkTgXuquveY+W2o8oT3ez1
TLSH
T13685380277E48872D5A6193158AABA1D5739BC50EA138F8F23007ECCFFF2741A965736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5032	4648	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_0ed991c8955241a757ca15ed7640d7be_cloudeye_darkgate_elex_maze_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_0ed991c8955241a757ca15ed7640d7be_cloudeye_darkgate_elex_maze_rhadamanthys_smoke-loader.exe"
1⤵
PID:4648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4648 -s 200
  2⤵
  - Program crash
  PID:5032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4648 -ip 4648
1⤵
PID:2308