350721300a0700ebf6a9d8db402750d3cba18beabc3307f7d22f990314c751c0

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 16:07

Target
2026-04-15_4b593db197437f5e052120a7f02133bd_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.9MB
Sample260415-tk5cysds4k
SHA256 350721300a0700ebf6a9d8db402750d3cba18beabc3307f7d22f990314c751c0
MD5 4b593db197437f5e052120a7f02133bd
SHA1 9eacfabaf230928163756925fe71b9349c52ba63
SHA512 a656167e596b74c2eb9603c91b773dfeb7e06865b1488806c9574dc84821b8e6f06f619f8ceffc9fda1ffa63f77078ddc7e8e39a7baaa72135ab7581f5b54cb9
SSDEEP 49152:Tx2aq2a1u5HOTfhKPgssSt2gzSS535DMnCIjtAy:RHOhv7StZg55
TLSH
T1ECD55B1277E442EAF9B35670DDB492369676BD211B35E28F6388261E0D71FD09A33323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4712	2280	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-15_4b593db197437f5e052120a7f02133bd_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_4b593db197437f5e052120a7f02133bd_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:2280
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2280 -s 8
  2⤵
  - Program crash
  PID:4712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2280 -ip 2280
1⤵
PID:2308