c816f341f9350aee41e7ffcc5954a38183d3bfe09f98bd648f1af665da11ecb4

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 16:13

Target
2026-04-16_c2cbce4724e1876f06739bbd40376aef_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
Size 1.9MB
Sample260416-tpde2aez4q
SHA256 c816f341f9350aee41e7ffcc5954a38183d3bfe09f98bd648f1af665da11ecb4
MD5 c2cbce4724e1876f06739bbd40376aef
SHA1 796650c12bfceb15e592d6ce5f855f1adb7a95e2
SHA512 7ff1834ab66be836817ccd1d462693810667c6a4bbe6f0ea1f906339ab7f9d5faf4c6d8b590cfc154bb88f161a767ad46b092deb2c5e2a3580a15157e941963e
SSDEEP 49152:WDHX3rgaDHX3rgsXsljmBQCKMN7pXRKNnp3:aX9Nng
TLSH
T1F2958C2177F58476F1B30A705E75E756A87EBD610F2181CFA3A80A4E0E31BD1AA31727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3012	1960	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-16_c2cbce4724e1876f06739bbd40376aef_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_c2cbce4724e1876f06739bbd40376aef_amadey_darkgate_elex_glassworm_hawkeye_luca-stealer_njra.exe"
1⤵
PID:1960
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 8
  2⤵
  - Program crash
  PID:3012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1960 -ip 1960
1⤵
PID:680