81c9e16155cc93dae52a4ef91a3225728f15758d7864293b26903d506942fe1b

Analysis

max time kernel
149s
max time network
131s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:05

Target
2026-04-16_03519003f5ccbeb15425d4f2d05f098e_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop.exe
Size 2.7MB
Sample260416-rd3vfacx21
SHA256 81c9e16155cc93dae52a4ef91a3225728f15758d7864293b26903d506942fe1b
MD5 03519003f5ccbeb15425d4f2d05f098e
SHA1 79cb0dd19f08d73f8caccf4f3ea8a51fa433963e
SHA512 859476594a32bc61fa780597d34c78eac687574a33393cfbbdc83e4e71503c1d8270c5580904e212972772c82a2acf3f43a23a8568b29459e4fac430db85fd35
SSDEEP 49152:8H676x4LMcY/+lj2M84p0DkYOMwwnMb4PmyVM35DMnCIjtAy:8H676xe1f5YOXwnS4rVz55
TLSH
T138D54C11766185B9CD6646318564EA7D1126BE109723AECB72CD3ECEFBF0BC11A37232
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3284	5064	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-16_03519003f5ccbeb15425d4f2d05f098e_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_03519003f5ccbeb15425d4f2d05f098e_amadey_darkgate_elex_glassworm_hawkeye_maze_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:5064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5064 -s 236
  2⤵
  - Program crash
  PID:3284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5064 -ip 5064
1⤵
PID:3820