b679ef1f2a28faafd5b7759a02fae51692c6f990dedbe568c68142bf7e70d5af

Analysis

max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:00

Target
2026-04-15_ce3f52dd877c79d1ec5365c9eaefee1b_amadey_elex_luca-stealer_njrat_redline-stealer_rhadamant.exe
Size 3.2MB
Sample260415-sdaz4ac12z
SHA256 b679ef1f2a28faafd5b7759a02fae51692c6f990dedbe568c68142bf7e70d5af
MD5 ce3f52dd877c79d1ec5365c9eaefee1b
SHA1 104c90c0ad114677471dccb40793f05444d54f9a
SHA512 6b21579115b70be7a3338af8134fb2d0dd3392a43e1fa57ec48f3cf957ab64c58e9a607cbb9a6fe3303f1ecfb8d297a07f024634b2b01e259bee3f18e7daf993
SSDEEP 24576:8Ex/WnSyhbzvZOqU1jc+lPYRXcRrxmN3lYrnk5+PIGpkLOBc2XkmqEKP6AjVrIth:/WSytLoqUVs8xmN3Aek03noj45wlDT
TLSH
T135F5B01DEE448D35CD1D0E308515A33CF6286D6FBD1E780A2E447A9EFAB3FC16925262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4752	1544	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_ce3f52dd877c79d1ec5365c9eaefee1b_amadey_elex_luca-stealer_njrat_redline-stealer_rhadamant.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_ce3f52dd877c79d1ec5365c9eaefee1b_amadey_elex_luca-stealer_njrat_redline-stealer_rhadamant.exe"
1⤵
PID:1544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1544 -s 8
  2⤵
  - Program crash
  PID:4752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1544 -ip 1544
1⤵
PID:3984