Analysis
- max time kernel
0s - max time network
5s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/04/2026, 13:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
- Size 4.1MB
- Sample260417-qs6zzaas7t
- SHA256 1a2085e19a796bd2ed9f03edcf801a0f7d56684e6db2d5e3012fd59dd72d0db2
- MD5 0de23c62596c063a069892b1db27abb1
- SHA1 156e094fd638601a38d07660a3e44e6d54288a57
- SHA512 1c478355505eda4dd357f2b1e32eca0d0b3227ad75fb44f6a4f3b20a824c59a5973cce9e8ae732abf49ec717d0039834da5b784051f246f14c085cede29524f7
- SSDEEP 49152:SLnHFLHkJENmDta4NDtoZlsDOSOD0g7mM+M6RkMkIM7I067yqnstLet3LyvDzxH:6D5CQDsDOAM+M6RkMkIM7dqnstLEoDFH
- TLSH T1E4164911ABFF9722ECB1E2309F7C91A844757E509DA0C21BB254F61DA836169783F723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10