b7f0ff8e3ae1eeb6f7271962fdb64d07e85bd8fd6051ab513af903eea9a72ccd

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 10:41

Target
2026-04-17_4572b82cb37b7b56d51d1dc8a8d127ae_darkgate_elex_luca-stealer_njrat_rhadamanthys_stop.exe
Size 1.9MB
Sample260417-mrgrxaev3t
SHA256 b7f0ff8e3ae1eeb6f7271962fdb64d07e85bd8fd6051ab513af903eea9a72ccd
MD5 4572b82cb37b7b56d51d1dc8a8d127ae
SHA1 faba71f1aa0da8af53e36bb421573bdafd85d4d8
SHA512 f26ded01771d6e4e11e712f183a8105a216904ffae989c853cb0a796c5d1a056cb2a544c5f3dfcb25c7adc76d2de3b77061fcf7ce5abf76d6d9ec91d3876884f
SSDEEP 49152:TagnTVO7BQCKMN7pXRKNnpzbutmkO+wAOInO4XrztygxLHkJE4VB:0V9Nnts+wE9XD8VB
TLSH
T1CA959E1263E19076E1B313305D7AA72AAA7EBD750B3182DF63981A4D1E717D0AE34733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
420	1160	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-17_4572b82cb37b7b56d51d1dc8a8d127ae_darkgate_elex_luca-stealer_njrat_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_4572b82cb37b7b56d51d1dc8a8d127ae_darkgate_elex_luca-stealer_njrat_rhadamanthys_stop.exe"
1⤵
PID:1160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 8
  2⤵
  - Program crash
  PID:420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1160 -ip 1160
1⤵
PID:1468