814c7b858db821b443443a5cb0f09a3acd8d36d78e59e401d6c0923b69d7e500

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 12:51

Target
2026-04-17_0c0afaa1c5f6125b2e25ea6cd3261905_darkgate_elex_rhadamanthys_smoke-loader.exe
Size 2.4MB
Sample260417-p3m46set6q
SHA256 814c7b858db821b443443a5cb0f09a3acd8d36d78e59e401d6c0923b69d7e500
MD5 0c0afaa1c5f6125b2e25ea6cd3261905
SHA1 7717633bc8a094a733d520b6d7da8d745dbf8624
SHA512 ebbb2419b9763dc64fe40a2948669e12c74e9e72ac921c9933bc15efe83dfde1b975e20041e267b067dde135bc56eb27deb6217211efb3264d7d844c4369bbac
SSDEEP 49152:8BArOO53RTqtiCqnstLet3Ly+/IabjKoh9WsIbutmkO+wAOInO4XrztygxLHkJEm:8qrOO53iqnstLEtIabjKoh9WsFs+wE9O
TLSH
T128B53811A3F14A31E06AF17269A4531E48B97F648D22C31BF740FA5D763A9717AB2333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4888	3376	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-17_0c0afaa1c5f6125b2e25ea6cd3261905_darkgate_elex_rhadamanthys_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_0c0afaa1c5f6125b2e25ea6cd3261905_darkgate_elex_rhadamanthys_smoke-loader.exe"
1⤵
PID:3376
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3376 -s 8
  2⤵
  - Program crash
  PID:4888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3376 -ip 3376
1⤵
PID:5056