4764e507128df4f1477cd88cf22e1fc96706b0596d12f5f2d98de064a92ddc59

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:28

Target
2026-04-16_3ca5d1b5ff7fe7d6351a2e9147bb7c67_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
Size 3.2MB
Sample260416-swt6paf141
SHA256 4764e507128df4f1477cd88cf22e1fc96706b0596d12f5f2d98de064a92ddc59
MD5 3ca5d1b5ff7fe7d6351a2e9147bb7c67
SHA1 f8d4438aca67d889c6f991f18a72f7d7974caa31
SHA512 11084fc33e013126c9643ff1d6f49691065f23fbb8a69908d99e85ac17bf57df764be1e0b35316700f06d95b10eea7773439abc8048f1d4479968e89a1606aa5
SSDEEP 49152:ngF1O3qjqgF1O+ljR8xmN3Aek03noj45wlDT6:+eUJF3noxDu
TLSH
T171F54B136644E632C46D117035E892639CE5FDA50A22499733ACBFAD5936FF03BF8326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4968	3408	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-16_3ca5d1b5ff7fe7d6351a2e9147bb7c67_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_3ca5d1b5ff7fe7d6351a2e9147bb7c67_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe"
1⤵
PID:3408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 8
  2⤵
  - Program crash
  PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3408 -ip 3408
1⤵
PID:2820