3317dc3497857864f73b6dad832afed0a223f6effc992c29d158969de6e5bc13

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:00

Target
2026-04-16_c98c9152971f71ebbde081350b317235_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 2.8MB
Sample260416-sdadkact9r
SHA256 3317dc3497857864f73b6dad832afed0a223f6effc992c29d158969de6e5bc13
MD5 c98c9152971f71ebbde081350b317235
SHA1 3e60b24573ea779be8dae0b78c23729f5688cfe1
SHA512 9426115a530ce3787d539c2f2afa89497f9aec1ae3222e9b9f243dd774c2a93e014183206a33a95bbd05d2c76bae3dc7e84205176535094eba80294b3d6d7186
SSDEEP 49152:avJJ8y5XIgekD/4MnYYJ2ZhqSGLHkJEMyljR:af8mek8IDQU
TLSH
T1D7D58C2EEEE19D35D56A09304565F73D62396E200A0A5883F39CBA1EE433FD2362D717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5620	2892	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-16_c98c9152971f71ebbde081350b317235_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_c98c9152971f71ebbde081350b317235_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
PID:2892
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2892 -s 8
  2⤵
  - Program crash
  PID:5620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2892 -ip 2892
1⤵
PID:2552