f5d9f5008c76dbb74c3937d746f860da0c5d8894ad571e0676fd060337ed111f

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 13:26

Target
2026-04-17_b6da04fb0f662aa46a7f84d901b5751a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Size 2.8MB
Sample260417-qpy5ysft2n
SHA256 f5d9f5008c76dbb74c3937d746f860da0c5d8894ad571e0676fd060337ed111f
MD5 b6da04fb0f662aa46a7f84d901b5751a
SHA1 4f00ec3223733176e963036510a0d9c0a8df221f
SHA512 636590e6a02881f8005e5134bbe987166366f00dca0baabbd90a2eaa00621ae2897ee08360ae914fade65f46d67d3ef3b4621e4a70102dda26f0448dc67a2c3a
SSDEEP 49152:W2a2azmDta4nuvFE9VfWkJ5u5HOT8WSytLoqUX:QCXF9FqH/stsFX
TLSH
T156D5391EEE44EE62C49D017078E1D37F5DE5BDA50A12489B3344BEAED836F8167E2306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5196	5112	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_b6da04fb0f662aa46a7f84d901b5751a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_b6da04fb0f662aa46a7f84d901b5751a_amadey_darkgate_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
1⤵
PID:5112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5112 -s 8
  2⤵
  - Program crash
  PID:5196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5112 -ip 5112
1⤵
PID:5200