a014ec76c819e1d0ed7ce812f4e3dc6e61a273d62e64a6c207066fd3ed628049

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 16:06

Target
2026-04-17_826687a6a50e4fa4218d170d38afe5c6_amadey_coinminer_darkgate_elex_emotet_glassworm_hawkeye_.exe
Size 3.4MB
Sample260417-tkbewact6p
SHA256 a014ec76c819e1d0ed7ce812f4e3dc6e61a273d62e64a6c207066fd3ed628049
MD5 826687a6a50e4fa4218d170d38afe5c6
SHA1 0b7bbabb620727ebd3dfcaa2c3ce6e1220c5c44d
SHA512 63a13ae9762d7591ee0fe06a4d9563a8a24fe0159a1b9f053cc88553be35d093e3d9f388ad46067219cfe2d854907ed00f4719ef8d35a0a6a75300313f33e850
SSDEEP 49152:zljboljb0oJdXN0BMOwLloBrugxljR8xmN3Aek03noj45wlDT:xYrJdXN0B7+sLeUJF3noxD
TLSH
T1B8F59E22BBA0C436D27306718E7AD315657DBD708B31468BF3945E5C2DB06D2AB36B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
892	4768	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_826687a6a50e4fa4218d170d38afe5c6_amadey_coinminer_darkgate_elex_emotet_glassworm_hawkeye_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_826687a6a50e4fa4218d170d38afe5c6_amadey_coinminer_darkgate_elex_emotet_glassworm_hawkeye_.exe"
1⤵
PID:4768
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 8
  2⤵
  - Program crash
  PID:892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4768 -ip 4768
1⤵
PID:1352