e403c9dcb317e0e2d4472a917fd8073d27f65dbbbad5e85dedd3d4be9f9f7465

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:17

Target
2026-04-16_14ac8e8927444d283a7ff627da55ba0f_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe
Size 2.8MB
Sample260416-rlwq4ac14x
SHA256 e403c9dcb317e0e2d4472a917fd8073d27f65dbbbad5e85dedd3d4be9f9f7465
MD5 14ac8e8927444d283a7ff627da55ba0f
SHA1 73acaeb56820c724931ad65728c275033c746faf
SHA512 1848f87dd04443361636d24de3a4f770583a0a679e06ebce182233b89f5699fef6e4d9892665c569af1a88be6676d399a61ae3f02f7bdf33884e578173568d16
SSDEEP 49152:WagnT02agnTjv9MwEp69BQCKMN7pXRKNnpiDkYOMwwnMb4PmyV:A92po9NnkYOXwnS4rV
TLSH
T1C2D56B1DFFE18C76E1A202714D76971E557ABE210B2182CB62983A1DDD71FC0AE36327
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1500	2520	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\2026-04-16_14ac8e8927444d283a7ff627da55ba0f_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_14ac8e8927444d283a7ff627da55ba0f_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_rhadamanthys_stop.exe"
1⤵
PID:2520
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2520 -s 8
  2⤵
  - Program crash
  PID:1500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2520 -ip 2520
1⤵
PID:980