517f65f5f3c0aa4ac9e95b7545c2d944ee9647bc25f403dfa11b42eca52c2488

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 16:03

Target
2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe
Size 1.3MB
Sample260415-thn8ysc13r
SHA256 517f65f5f3c0aa4ac9e95b7545c2d944ee9647bc25f403dfa11b42eca52c2488
MD5 859e4240a0f38e0ba30e13480c352309
SHA1 9dfdc971fdc61b6f3be7051afe994a9b6834c29f
SHA512 7d3009406119ec7be03f22feba1b4ec58f91c8ad5fea574095b8ea65869bb5839080c69d83f81844db3859ec3bfa5ea0043a188ccff2d6022ecc6306c9af5780
SSDEEP 12288:9+5EM3H677d4xpVbuxrqSn5q8gbcImt0LDviQs:05v3H67p4x4ri8Stz
TLSH
T15555A1036914EB22C9AD19B536E0C6771CD4ADD10A1358E37399BFFE883BED167E0225
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
440	4020	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe"
1⤵
PID:4020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 224
  2⤵
  - Program crash
  PID:440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4020 -ip 4020
1⤵
PID:4692