b74f87e1ef83900b6ee9ca82def524aadc9ab00c6f637655402b56e1590dc25b

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:02

Target
2026-04-16_1f8a922702a3755fe8c9818566674c76_darkgate_elex_glassworm_rhadamanthys_stop.exe
Size 1.5MB
Sample260416-semqaaez8t
SHA256 b74f87e1ef83900b6ee9ca82def524aadc9ab00c6f637655402b56e1590dc25b
MD5 1f8a922702a3755fe8c9818566674c76
SHA1 e626568128e84d30f59cd8f05ee0f1b84d8aca42
SHA512 ce3dc1a5809e900856631d24529853fa822f8d8863eaab834c1b9ba67be11aaf9820de535c5adc3c5d2558945062456c3643b8fcbbcdba2f9644d6199e4add91
SSDEEP 12288:OHNDctWdh9MZz2M2GAu1mt0LDwrephwctWdh9MZzh+:OHNDT9+2M84pmT9+h+
TLSH
T13F755D426944E732C59C18B439D0866F5CD0AED18A035CA63395BFEEFBBAF9167D1230
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
672	1076	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_1f8a922702a3755fe8c9818566674c76_darkgate_elex_glassworm_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_1f8a922702a3755fe8c9818566674c76_darkgate_elex_glassworm_rhadamanthys_stop.exe"
1⤵
PID:1076
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 8
  2⤵
  - Program crash
  PID:672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1076 -ip 1076
1⤵
PID:3680