Analysis
- max time kernel
149s - max time network
146s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/04/2026, 14:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_210d0d0f42c0ab4dbc39f21cb8035be6_amadey_darkgate_elex_glassworm_hawkeye_maze_redline-stea.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_210d0d0f42c0ab4dbc39f21cb8035be6_amadey_darkgate_elex_glassworm_hawkeye_maze_redline-stea.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-16_210d0d0f42c0ab4dbc39f21cb8035be6_amadey_darkgate_elex_glassworm_hawkeye_maze_redline-stea.exe
- Size 3.3MB
- Sample260416-ry17cabv2j
- SHA256 709e8de8bee3421512550bf5ff3d3c4806f88ed82c74090fb9c2d490d9057fd7
- MD5 210d0d0f42c0ab4dbc39f21cb8035be6
- SHA1 b8d639421b561209a879ae381af006fcede552a2
- SHA512 783c8de3db59d8f69f2fcb8888cb41963025356d0ed1f3c8a4b58a69ae62ff72a44799593d813e33fd157bd0c42eb4324c0b4ad45109fd87767cc82463e6a234
- SSDEEP 49152:T/ss1TSWSytLdOljZOjcY/E/IabjKoh9WsY:h4stJQtIabjKoh9WsY
- TLSH T141F52A1162544831CC1D4E715450EA76F9227D4FBE2F3B8B7E817E9EFBB36C12662222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3228 5972 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-16_210d0d0f42c0ab4dbc39f21cb8035be6_amadey_darkgate_elex_glassworm_hawkeye_maze_redline-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-16_210d0d0f42c0ab4dbc39f21cb8035be6_amadey_darkgate_elex_glassworm_hawkeye_maze_redline-stea.exe"1⤵PID:5972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5972 -s 82⤵
- Program crash
PID:3228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 5972 -ip 59721⤵PID:5600