085a1e0759d8bbce601b51429cdb018ba475168a95b3dac54e216dcabcad5b3e

Analysis

max time kernel
149s
max time network
121s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 14:01

Target
2026-04-17_5e3dea9896bd6a1d3036c1d172382d3e_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.6MB
Sample260417-rbslpabs5x
SHA256 085a1e0759d8bbce601b51429cdb018ba475168a95b3dac54e216dcabcad5b3e
MD5 5e3dea9896bd6a1d3036c1d172382d3e
SHA1 7773b7871fa86f4d5bc275f7f2eb602ac351941e
SHA512 e6e3eac1031cbf147e065e717967553be87f5769caad6bdf749cd6ecf1a4990c857d8c0d173d8926e491764a8fe6dc446350a1fe316fc267fe95550c2e67bf8e
SSDEEP 49152:v2aIzEw9vOC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqu:WAw1+RYNAKvkTgXuquveY+W2o8oT3ezN
TLSH
T105C5180EFFE44C72D562493158A6A70E5639BC519A138F8B23443ACDFFB1F90A925336
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2312	3404	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-17_5e3dea9896bd6a1d3036c1d172382d3e_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_5e3dea9896bd6a1d3036c1d172382d3e_cloudeye_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:3404
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3404 -s 8
  2⤵
  - Program crash
  PID:2312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3404 -ip 3404
1⤵
PID:4484