3978ce412d882ad33f7477daebaf0e606945df4423f01616b1647c5ba7d3d11d

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 14:30

Target
2026-04-15_1017afd80daf93a15ad840067337fc87_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 1.6MB
Sample260415-rt82dshs9j
SHA256 3978ce412d882ad33f7477daebaf0e606945df4423f01616b1647c5ba7d3d11d
MD5 1017afd80daf93a15ad840067337fc87
SHA1 3e2b26ffa6d512edb59a847c785b846377755b9c
SHA512 68d73af79a477ec3e33a19223e4b9244214d8743120da203513365ae4043152522db0efef5e1fa2083953c14f5227cef3400441e138f71fa75fc9889240cea74
SSDEEP 24576:OHD54GXX3LNaiSHiLHgZpJEDAhX8vzAFhHENJyEVJYdnxI7Hh9ZBXf:WDHXBcHiLHkJEDAMMFeeE0O7Hhp
TLSH
T1B9759D1277E08436F2B31730A979A36596BEFC316E35820F63943B6E1DB16D19A34723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3316	5016	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_1017afd80daf93a15ad840067337fc87_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_1017afd80daf93a15ad840067337fc87_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:5016
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 8
  2⤵
  - Program crash
  PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5016 -ip 5016
1⤵
PID:440