1a2085e19a796bd2ed9f03edcf801a0f7d56684e6db2d5e3012fd59dd72d0db2

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 13:32

Target
2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
Size 4.1MB
Sample260417-qs6zzaas7t
SHA256 1a2085e19a796bd2ed9f03edcf801a0f7d56684e6db2d5e3012fd59dd72d0db2
MD5 0de23c62596c063a069892b1db27abb1
SHA1 156e094fd638601a38d07660a3e44e6d54288a57
SHA512 1c478355505eda4dd357f2b1e32eca0d0b3227ad75fb44f6a4f3b20a824c59a5973cce9e8ae732abf49ec717d0039834da5b784051f246f14c085cede29524f7
SSDEEP 49152:SLnHFLHkJENmDta4NDtoZlsDOSOD0g7mM+M6RkMkIM7I067yqnstLet3LyvDzxH:6D5CQDsDOAM+M6RkMkIM7dqnstLEoDFH
TLSH
T1E4164911ABFF9722ECB1E2309F7C91A844757E509DA0C21BB254F61DA836169783F723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5024	3316	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_0de23c62596c063a069892b1db27abb1_amadey_darkgate_elex_manuscrypt_rhadamanthys_stop.exe"
1⤵
PID:3316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 8
  2⤵
  - Program crash
  PID:5024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3316 -ip 3316
1⤵
PID:4856