Analysis
- max time kernel
149s - max time network
138s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 16:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_4ef8d76650bf5bf017597f9682fae089_cloudeye_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_4ef8d76650bf5bf017597f9682fae089_cloudeye_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-17_4ef8d76650bf5bf017597f9682fae089_cloudeye_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
- Size 2.6MB
- Sample260417-trwpdscx4n
- SHA256 880784f8b64bcfb6e3627fe6db1e21c454c1323f2272b0923165e7ffcd034a46
- MD5 4ef8d76650bf5bf017597f9682fae089
- SHA1 4cc500c5fb7d96280a1439496306c24231c5aef8
- SHA512 7458b7686635ac520a613c09178ccffc943a0a2dc975c047e798840e494c8a4d8e8947ec89f4837fc6a28d997ef8d4ee74893018030dcbd5eeb9513f6a10f66d
- SSDEEP 49152:iM84pbC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzlf:rfe+RYNAKvkTgXuquveY+W2o8oT3ezMi
- TLSH T1D3C53A036694EA32C0BD197078E597275DE5BDE109238A5B7341BFED8833F92A7D1322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4948 2436 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-17_4ef8d76650bf5bf017597f9682fae089_cloudeye_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-17_4ef8d76650bf5bf017597f9682fae089_cloudeye_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe"1⤵PID:2436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 82⤵
- Program crash
PID:4948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2436 -ip 24361⤵PID:5680