ef2a6b0f5df41e1922fbcb98420f73a621cf483f6b2d444c8c54b70e5813c81d

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:38

Target
2026-04-15_47147d690264ded8906f6223d038446f_amadey_darkgate_elex_glassworm_hawkeye_karagany_manuscry.exe
Size 2.7MB
Sample260415-s22sqaew2t
SHA256 ef2a6b0f5df41e1922fbcb98420f73a621cf483f6b2d444c8c54b70e5813c81d
MD5 47147d690264ded8906f6223d038446f
SHA1 5bdfabe644b5d5132109f6092d2746fa1814ed2b
SHA512 a6c9f77cf4b711b914da05d08c461dd8924aabdbb1ba0867fa7341df3b136c141bf4db56caf39a8cb9836a3065741ea7c3ede16206007b66051ea6b63a25331c
SSDEEP 24576:3z1ay40s9baewsAjVoAoSI8LUlFl5FpVDKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVDR:D5s8ljYcY/VDkYOMwwnMb4PmyV1
TLSH
T17AD506136E5D8431C55FBE300D15EBC95226BE1096232E9B6ED97E8EFBB12C1392E131
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4924	5904	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_47147d690264ded8906f6223d038446f_amadey_darkgate_elex_glassworm_hawkeye_karagany_manuscry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_47147d690264ded8906f6223d038446f_amadey_darkgate_elex_glassworm_hawkeye_karagany_manuscry.exe"
1⤵
PID:5904
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5904 -s 8
  2⤵
  - Program crash
  PID:4924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5904 -ip 5904
1⤵
PID:2020