44b09271bcaf9b3a7610d6850d950f8b723cafadbdbedf19e7f05ce4237a7939

Analysis

max time kernel
149s
max time network
117s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:54

Target
2026-04-16_797cd72c910756746fa00e45d57f2821_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Size 2.5MB
Sample260416-tclwmsg15z
SHA256 44b09271bcaf9b3a7610d6850d950f8b723cafadbdbedf19e7f05ce4237a7939
MD5 797cd72c910756746fa00e45d57f2821
SHA1 4d1530a6564c6180b160e3810edf259bcb61f4b6
SHA512 f6200d2d464c9548ed98d89a1f373c1c433e87b8c418544337f64ec90f5c519a45b2901e9b87b1f8be3056db3b4967ed41ded3c1f177bca408eb45f3e25e8da9
SSDEEP 49152:pbtL2tLR4dw3yd2OluON4fA9u7LfU9BMO+YrovpU/9mpWSytLdu:FV2V7OgFstJu
TLSH
T1E8C5AD32AE70D4BAC12BC1B5A62BC265D731BC308BB6418B5361BB397F361D11E76607
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1684	5072	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_797cd72c910756746fa00e45d57f2821_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_797cd72c910756746fa00e45d57f2821_amadey_elex_glassworm_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
1⤵
PID:5072
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 8
  2⤵
  - Program crash
  PID:1684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5072 -ip 5072
1⤵
PID:420