73ce1e3d4ffcdb78dfb032f43cc2fb07536c316861a504091b5ed18b6dbf34cf

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:07

Target
2026-04-15_2cbe4de9618920dbb9daa31b24635d64_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
Size 2.7MB
Sample260415-shetvadt3x
SHA256 73ce1e3d4ffcdb78dfb032f43cc2fb07536c316861a504091b5ed18b6dbf34cf
MD5 2cbe4de9618920dbb9daa31b24635d64
SHA1 4ea13901ccbb6984f3efc94101ad01e5a1dbf672
SHA512 f6d539c19272ee0192f27c66d09ef4af2c3eb522df04a15f81eea16285cf53262368a7aaf8abaa54e5729e559f8196e0d8669c5fe164ed01a76652007d6f1422
SSDEEP 24576:8zsGQ8OlzsGQ8Ow54GXX54GX1aewsAja2ROf1IegqutJQ5FeQzcuC4r6HQ:8B7OlB7OwHXHwlja2RAR5FeA6w
TLSH
T14FD5BE51F7F4C035F1B71A715ABA9632A976BD114B30C68F62A8C94E1F723C18936B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3912	4944	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_2cbe4de9618920dbb9daa31b24635d64_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_2cbe4de9618920dbb9daa31b24635d64_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe"
1⤵
PID:4944
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4944 -s 8
  2⤵
  - Program crash
  PID:3912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4944 -ip 4944
1⤵
PID:940