bb361e3a59e39c78d1d80bc989718425f76a33dcfb1c0c2ae8c8268cb3825791

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 13:45

Target
2026-04-16_2ce970e117994c5dc3ff73af68200164_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
Size 1.9MB
Sample260416-q2dpsahs5j
SHA256 bb361e3a59e39c78d1d80bc989718425f76a33dcfb1c0c2ae8c8268cb3825791
MD5 2ce970e117994c5dc3ff73af68200164
SHA1 c5202e739bc55477eef74e7918dd7980e30f6fb2
SHA512 2eee30421d66f1517b077ff22f7a5307899d31b9274ab5793a6432ec396bed56ee6b3201c8094895e1931b3eb19eec43d534d13bfd7f66a256f8c631398beca7
SSDEEP 49152:vDHX3rgaDHX3rgsXsljmBQCKMN7pXRKNnp3:XX9Nng
TLSH
T1F6958D2177F58476F1B30A705E75D756A87EBD610F2181CFA3A80A4E0E31BD1AA32727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3100	4484	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_2ce970e117994c5dc3ff73af68200164_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_2ce970e117994c5dc3ff73af68200164_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe"
1⤵
PID:4484
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4484 -s 8
  2⤵
  - Program crash
  PID:3100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4484 -ip 4484
1⤵
PID:3128