Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 15:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_5e04ac88064eb258239e0c42771011f5_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_5e04ac88064eb258239e0c42771011f5_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-15_5e04ac88064eb258239e0c42771011f5_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stop.exe
- Size 1.3MB
- Sample260415-sk6eksbt2k
- SHA256 e51030a10e68f49c21a723673322a262d7dec1533f86d648b1a9de0b8867e356
- MD5 5e04ac88064eb258239e0c42771011f5
- SHA1 4be66ebc58f4d5ad78e0ca4ee7fb24b4b201a00a
- SHA512 55d9e193761ea5309042711079cc8b186dbd0fe3f9810edd6ffb801f27153f01925062a4d0f68f0e62ee7921a78c1fa7f8a32fad16b0ead561fb8cd4e6056dac
- SSDEEP 24576:OHNgHuH7kLqLkRwo8rRoNk7BZpIWvWL0vbJ:Wa27kLf8rRokpzA0vbJ
- TLSH T10C55AE21BAE0C436E2B719B04ABD9725993DFD700F6142CBF3A4466E5E707C19A3271B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3372 2548 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-15_5e04ac88064eb258239e0c42771011f5_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-15_5e04ac88064eb258239e0c42771011f5_amadey_darkgate_elex_glassworm_rhadamanthys_smoke-loader_stop.exe"1⤵PID:2548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 82⤵
- Program crash
PID:3372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2548 -ip 25481⤵PID:3972