fc55d5f87246be218d13d4dfc3a9f29f4620edf0b2dc623d08e1b75338cbe68a

Analysis

max time kernel
149s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:26

Target
2026-04-15_5fef017811444e8189cf060a95201949_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe
Size 2.6MB
Sample260415-st556sd13s
SHA256 fc55d5f87246be218d13d4dfc3a9f29f4620edf0b2dc623d08e1b75338cbe68a
MD5 5fef017811444e8189cf060a95201949
SHA1 235a5b9b1fbe173b3115b8d9eff2958c25ba452b
SHA512 89d57449ba7699025ac33ac87ee8999538cfb9ecbd209612ef6d4e441b794e594ddba9d0946b231a6317a88a167bc6dfc71a793d0a9c358bae70d29f2a0c0112
SSDEEP 49152:WDHXAWSytLoqUIcHi/IabjKoh9WstWSytLddLfUv0g7mM+M6RkMkIM7I067W:RstsFIlIabjKoh9WststJDM+M6RkMkI0
TLSH
T134D57D12934098A3C16414B2A456E7511F64BFB41E13D36BFF50B61EFF32AC22AF356A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3272	436	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_5fef017811444e8189cf060a95201949_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_5fef017811444e8189cf060a95201949_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe"
1⤵
PID:436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 436 -s 8
  2⤵
  - Program crash
  PID:3272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 436 -ip 436
1⤵
PID:5848