Analysis
- max time kernel
149s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 16:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_887ca2c3edc59bf6a41b99e95f3ecdfb_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_887ca2c3edc59bf6a41b99e95f3ecdfb_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-15_887ca2c3edc59bf6a41b99e95f3ecdfb_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
- Size 2.6MB
- Sample260415-tkhh7ac19p
- SHA256 599a97b9f9ed2e2128e2c01b723bb9070ba0beb363ae63f9aece9008c2a72bb7
- MD5 887ca2c3edc59bf6a41b99e95f3ecdfb
- SHA1 627b331190d4a51acd8647ec0d823224660c7ca2
- SHA512 b4ab9cb89363e4936d136096af76ea9304db7b1de59355c11bb88801b3ad31b432be69981c9ae33a81bdf38a2f49ef0d4c1c387885826020d9ea5a6666fdca24
- SSDEEP 49152:WDHXwsNBk9BwN31lj4P9zWmT1rOO53RTqtiGlj+:zsNi9BFPTrOO53h
- TLSH T11AC5F613AEAC8031D1AF3D701D61D7D95528BD218B127D87AED43ECDEAB06C17A3D622
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4356 4660 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-15_887ca2c3edc59bf6a41b99e95f3ecdfb_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-15_887ca2c3edc59bf6a41b99e95f3ecdfb_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe"1⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4660 -s 82⤵
- Program crash
PID:4356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4660 -ip 46601⤵PID:3312