fb9ec5e79c76438a9d8f25fc023f512aefe310b63c132705de1acbf851e5f0f5

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 14:58

Target
2026-04-17_5348843be0227fdc47862947a6248bf1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_stop_vidar.exe
Size 2.4MB
Sample260417-scelwscy71
SHA256 fb9ec5e79c76438a9d8f25fc023f512aefe310b63c132705de1acbf851e5f0f5
MD5 5348843be0227fdc47862947a6248bf1
SHA1 b0b462bfa840d7ac14aa5685593de74f1b7e69ab
SHA512 534507d3bab0820ca1bd12f4d9179a22955d61af7499150d3c8f1c295d76394202d4775b0a937bee222577d642778a9acb1c2b3b713d5dab9e926f3900a4410b
SSDEEP 49152:a9dsTh7IwwTbtL2tLr8xmN3Aek03noj45wlDTihKPgssSt2gB:t7IwwnV2VreUJF3noxD2hv7StX
TLSH
T194C57C1267E48079F5B36731DEB9A2A096B67C709B35C6CF23841A1E1D71AD0AE31733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1836	3404	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_5348843be0227fdc47862947a6248bf1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_5348843be0227fdc47862947a6248bf1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader_stop_vidar.exe"
1⤵
PID:3404
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3404 -s 8
  2⤵
  - Program crash
  PID:1836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3404 -ip 3404
1⤵
PID:3920