e74f89a4411f7d63d0de149f5a32b9e0963c57f6bc843e677a5b5aabd5cdc8d6

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 14:04

Target
2026-04-17_29227f1b6ce1010ff4c7882530bdaf8b_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Size 1.5MB
Sample260417-rdnerabt4x
SHA256 e74f89a4411f7d63d0de149f5a32b9e0963c57f6bc843e677a5b5aabd5cdc8d6
MD5 29227f1b6ce1010ff4c7882530bdaf8b
SHA1 7df8015a89ab3ae4148926459b677779912e0d22
SHA512 14fc175fe1696fc27af7597fbb96de38ca093366da89660db043240d99ed692e6a8f9633a149cbc5ced774eea9e64e364c76e36129b752cb5527f1ac2eb9ee85
SSDEEP 24576:5JM8OfLqLAP/oXSaG6aewsAjy4/izRXTOkMtrIceMaFPjkjD29:5JvOfLqrGtljyakOElMaFLk
TLSH
T1CD759E21FAA1C032D6B706B10B39A325667DBE300B3155DBA3986F8D69702F1AF35717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1444	4864	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_29227f1b6ce1010ff4c7882530bdaf8b_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_29227f1b6ce1010ff4c7882530bdaf8b_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe"
1⤵
PID:4864
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 8
  2⤵
  - Program crash
  PID:1444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4864 -ip 4864
1⤵
PID:4268