294bcacca7cc522b537f0e000ccee82f05c868ee74f53a6795595b2c4bd5d113

Analysis

max time kernel
149s
max time network
131s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 15:43

Target
2026-04-17_8f528ed8cb789a4051d675f0f5903a67_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 3.1MB
Sample260417-s5v5caev7s
SHA256 294bcacca7cc522b537f0e000ccee82f05c868ee74f53a6795595b2c4bd5d113
MD5 8f528ed8cb789a4051d675f0f5903a67
SHA1 0c583099b9b3c45612f3caf229f4c85d88ff5f93
SHA512 d3fc30800b0d77958270c9cebf9a85a1857ddcf20271d659bd0de0bb04d06ad4456a91df8bce6590f1c0324fad91d7597bf1452d4bc1b51c7e2dc823ae28e042
SSDEEP 49152:WgnThqagnThtDtoZXFvoJdXN0BMOwLloBrug/v9MwDzx54w:h0JdXN0B7+sd9JDF7
TLSH
T12CE529223AEF9A22EC7141708F7D86944564BC611BE1C2DB7290766DC9336CDA93F723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4656	3240	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-17_8f528ed8cb789a4051d675f0f5903a67_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_8f528ed8cb789a4051d675f0f5903a67_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:3240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3240 -s 8
  2⤵
  - Program crash
  PID:4656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3240 -ip 3240
1⤵
PID:5868