0a83483b3f9fbe937add9ab5fff39b3a3fd7775952ec2fddd9f619fe7068329a

Analysis

max time kernel
149s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 16:27

Target
2026-04-16_5a66f12d0710ba16c349ef57bb1589af_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe
Size 1.8MB
Sample260416-tyjcmsfs7m
SHA256 0a83483b3f9fbe937add9ab5fff39b3a3fd7775952ec2fddd9f619fe7068329a
MD5 5a66f12d0710ba16c349ef57bb1589af
SHA1 ea1d9a96519d25c9f6ab7584147fd58d5e7dbb4b
SHA512 576a473b36dcc3cfd37d8d5230aded68b49103cc5dd1b0ac6d7f42c7a043427004b76b5954bd0bf1e44461d9a3c63c476e0b746743624074c18f1378dcd6862b
SSDEEP 24576:OHNgHg3nFoAlaK9NGQRl0M84p8pfGSzFQlHQy5Sk2:WaNK9NG40M84p8pLS92
TLSH
T111956B2DFFA48CA6E5670A3489B1C31D9675BD210B11D28F6394724EDE32FC06A3A717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1176	2992	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_5a66f12d0710ba16c349ef57bb1589af_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_5a66f12d0710ba16c349ef57bb1589af_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe"
1⤵
PID:2992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2992 -s 8
  2⤵
  - Program crash
  PID:1176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2992 -ip 2992
1⤵
PID:3812