136f2fc8b40936afe221ae714be9a4714d322d3496b3d175e86b26a878418022

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 10:16

Target
2026-04-17_2caca4f6ccdadae7aa20e0b907825208_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe
Size 2.6MB
Sample260417-max3kadz2x
SHA256 136f2fc8b40936afe221ae714be9a4714d322d3496b3d175e86b26a878418022
MD5 2caca4f6ccdadae7aa20e0b907825208
SHA1 bc3fe800495b00582e0bac460aab1c3dc5d8c082
SHA512 ecf99d773ae9415a01e4b41314b9964ba77c8bd0923f195987cd1a879887cd4133cdf58b76bcea4970c7ff5092ca31c033ab546dd2242d92b92126d3c0f6103f
SSDEEP 49152:W2a2aDHXAWSytLoqU1OsLfUjsNBk9/fw2BwfmM0fpITeqb:hstsFasNi9XwgwfoIeqb
TLSH
T114C59D33B6A0A462D27509B05961F730A639BD311B1A69C7F25CBB1E2D737C17A3A307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2448	3984	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_2caca4f6ccdadae7aa20e0b907825208_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_2caca4f6ccdadae7aa20e0b907825208_amadey_coinminer_elex_glassworm_redline-stealer_rhadaman.exe"
1⤵
PID:3984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 8
  2⤵
  - Program crash
  PID:2448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 3984 -ip 3984
1⤵
PID:2828