6d6c4409577bc1479305774b2b8b5b76a7b3bdc0fb69088061cd82fd959e68af

Analysis

max time kernel
149s
max time network
104s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 12:30

Target
2026-04-16_8cb271f27e2561b3d2e505c63a8f2146_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 1.8MB
Sample260416-ppntjsat3z
SHA256 6d6c4409577bc1479305774b2b8b5b76a7b3bdc0fb69088061cd82fd959e68af
MD5 8cb271f27e2561b3d2e505c63a8f2146
SHA1 d53283bdba8bc18bae1d247fe1fe489cda381bf3
SHA512 b6be5bb75fe306c9f38096c38b1d3fed8fc067e80b8f618e974e618e5ada153354c5dfe164bb225936602a7602d4b61c8b7b2fac8a08a9738e0a77017695a4b7
SSDEEP 12288:moumouYUtNL8YcL5YHaI7XHgZQKhJgeCmd3DEpUE9QDV9U11SJAwSfxL/2Dc3jDs:qqPbL8iHFLHgZpJEtA6aewsAjj
TLSH
T1C295BE13EA90C532F25A05301E66DF15A6FBAD50DB024677E3EB3B8D28713D32AB5643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1912	4360	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_8cb271f27e2561b3d2e505c63a8f2146_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_8cb271f27e2561b3d2e505c63a8f2146_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
PID:4360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4360 -s 8
  2⤵
  - Program crash
  PID:1912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4360 -ip 4360
1⤵
PID:2092