1daeab7b48795ad1bbfea2220d6508b907b55452776fb4957afa3fea0df22a7e

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 14:18

Target
2026-04-15_94c9cffa094baa810918018a455a7cbd_amadey_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe
Size 2.1MB
Sample260415-rmlbragy4q
SHA256 1daeab7b48795ad1bbfea2220d6508b907b55452776fb4957afa3fea0df22a7e
MD5 94c9cffa094baa810918018a455a7cbd
SHA1 689c879281d415a6ec680d178929036dcac80332
SHA512 f6a7aab5d8b61aef90bfaa700ee2337bccc6f8c88619d5239e4be474ae34455161a235a369fdbdc09e3ab1a87c1b3be35bc434fe39e647701d2ae27fc126e156
SSDEEP 49152:vgnTRwnNTB/LfU+0g7mM+M6RkMkIM7I067DIgjdsk9WnO:VUM+M6RkMkIM7hgjOk9WO
TLSH
T19DA56D53F7D498E2E0B605704ABA97209676FC251F2183CF62A8E70E1D317E16D36F26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5008	5844	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_94c9cffa094baa810918018a455a7cbd_amadey_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_94c9cffa094baa810918018a455a7cbd_amadey_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe"
1⤵
PID:5844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5844 -s 8
  2⤵
  - Program crash
  PID:5008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5844 -ip 5844
1⤵
PID:4212