2d928b2de73924571c17888da30ae7e1611ee9fc90a7ddf1f42b56d3e6c58051

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:21

Target
2026-04-15_36d96a8a08b505d4ef362edc0fcc77dd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 2.3MB
Sample260415-srkfpabx2k
SHA256 2d928b2de73924571c17888da30ae7e1611ee9fc90a7ddf1f42b56d3e6c58051
MD5 36d96a8a08b505d4ef362edc0fcc77dd
SHA1 f008553c23da066b75d3ae4843e0df9cd32106d1
SHA512 f5070f75a8b3518dc1698c081e67c8b8b9ea611132f5574b6f27dd5cb16ad3b731b683084615133e155aed732b5ba04f66e340b2e759e65eb3d2425d9b0e6cf5
SSDEEP 49152:1sNBk9BwN31lj4P9zWmT1rOO53RTqtiGlj+:1sNi9BFPTrOO53h
TLSH
T113B5D413AEAC9031D1AF3D711D61D7D95528BC208B227D87AED43ECDEAB05C17A3D622
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5508	1112	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_36d96a8a08b505d4ef362edc0fcc77dd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_36d96a8a08b505d4ef362edc0fcc77dd_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
PID:1112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1112 -s 8
  2⤵
  - Program crash
  PID:5508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1112 -ip 1112
1⤵
PID:1048