17ee8b2ff2a4b1d02951c9a14417cd2e9fd7142e8177d7f266ac6878f9c3739f

Analysis

max time kernel
149s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:29

Target
2026-04-16_0db5ece0c73dd6453bbbca09e4b11dcd_amadey_coinminer_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Size 2.5MB
Sample260416-rt355sa17l
SHA256 17ee8b2ff2a4b1d02951c9a14417cd2e9fd7142e8177d7f266ac6878f9c3739f
MD5 0db5ece0c73dd6453bbbca09e4b11dcd
SHA1 f12d9148f8c3ac29ab5f70119273cbb50f708620
SHA512 e7c9d77312dab8b945c0fda1a40e57929c1c1dc8528f2e750b5f1fba3ff910f86e2171901f9f85dab679419549222b94613958e93b1604736184ada1fa8a4546
SSDEEP 49152:T2aDHXBEzD8xmN3Aek03noj45wlDTCsNBk9/fw2BwfmM0fV:M3eUJF3noxDOsNi9Xwgwfot
TLSH
T19BC5AE22F750A033D67202319D69B36179BCBA315B15669BE39CAE1D3EB06D17B36303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2800	4692	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-16_0db5ece0c73dd6453bbbca09e4b11dcd_amadey_coinminer_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_0db5ece0c73dd6453bbbca09e4b11dcd_amadey_coinminer_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:4692
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4692 -s 8
  2⤵
  - Program crash
  PID:2800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4692 -ip 4692
1⤵
PID:3820