Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_cbb74afb4e037a659ae7c20af40b049a_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_cbb74afb4e037a659ae7c20af40b049a_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-15_cbb74afb4e037a659ae7c20af40b049a_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe
- Size 2.8MB
- Sample260415-vyc2ashv8v
- SHA256 f8145accf9f7ccad67911265a0f80d38463b826ff35299fd8c196f78426e3f84
- MD5 cbb74afb4e037a659ae7c20af40b049a
- SHA1 f9edc6d92e765c4c04a41f641d4c447dff2ca971
- SHA512 3731aca7b2b31d3b592b54a697aa6585c3bbdfbfef4506926c5f5aae3526153818131d0efc78d5fbfb7e6577a0c78914b2f092b2f43861aa0cb4c97129207d6b
- SSDEEP 49152:Wi4EA0vbFljiZqhaK6zbfqdlqqnstLet3Lyo:zAO6xDqnstLE7
- TLSH T1CCD52710A7F54135E0BAF63469B4920E9976BE218F31C78FF240D15D2E3AAE1A931737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 912 3984 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-15_cbb74afb4e037a659ae7c20af40b049a_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-15_cbb74afb4e037a659ae7c20af40b049a_amadey_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader.exe"1⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 82⤵
- Program crash
PID:912
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3984 -ip 39841⤵PID:3260