Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/04/2026, 16:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_53c40aabf12d70b40e6e478509fdd730_amadey_coinminer_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_53c40aabf12d70b40e6e478509fdd730_amadey_coinminer_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-16_53c40aabf12d70b40e6e478509fdd730_amadey_coinminer_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader_stop.exe
- Size 2.2MB
- Sample260416-t7capaat2t
- SHA256 43eec91d289041b86b76d85f4da2c727038d34ab3e53a5c8d6397cd8bfb6c16c
- MD5 53c40aabf12d70b40e6e478509fdd730
- SHA1 8084bd655ab595a6efc1ded99498d2290a2fae40
- SHA512 1d09e524ea3e9462f488f81834bee79096d645d23303ac347dbb9fc4d9ee71f859e542e5b47a2a6bad00dd688626707c8068b304f40ab87aa385abe64543a56f
- SSDEEP 24576:O+HNYazXVav9MkLaewsAj4cuzKPgssStPUvg/c+lPY:fdEv9MLlj4hKPgssSt2g/
- TLSH T10FB5180277E48075E1B32A715A79925D5A767C60DB338E8F62901EDEABF07C09A35333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4944 5608 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-16_53c40aabf12d70b40e6e478509fdd730_amadey_coinminer_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-16_53c40aabf12d70b40e6e478509fdd730_amadey_coinminer_darkgate_elex_glassworm_hawkeye_rhadamanthys_smoke-loader_stop.exe"1⤵PID:5608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5608 -s 82⤵
- Program crash
PID:4944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5608 -ip 56081⤵PID:4872