517f65f5f3c0aa4ac9e95b7545c2d944ee9647bc25f403dfa11b42eca52c2488

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 16:03

Target
2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe
Size 1.3MB
Sample260415-thn8ysc13r
SHA256 517f65f5f3c0aa4ac9e95b7545c2d944ee9647bc25f403dfa11b42eca52c2488
MD5 859e4240a0f38e0ba30e13480c352309
SHA1 9dfdc971fdc61b6f3be7051afe994a9b6834c29f
SHA512 7d3009406119ec7be03f22feba1b4ec58f91c8ad5fea574095b8ea65869bb5839080c69d83f81844db3859ec3bfa5ea0043a188ccff2d6022ecc6306c9af5780
SSDEEP 12288:9+5EM3H677d4xpVbuxrqSn5q8gbcImt0LDviQs:05v3H67p4x4ri8Stz
TLSH
T15555A1036914EB22C9AD19B536E0C6771CD4ADD10A1358E37399BFFE883BED167E0225
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5028	3968	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_859e4240a0f38e0ba30e13480c352309_darkgate_elex_glassworm_maze_rhadamanthys.exe"
1⤵
PID:3968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3968 -s 236
  2⤵
  - Program crash
  PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3968 -ip 3968
1⤵
PID:2872