b7a3d526cdb124b229b7ed558e75f8d5aea19ee89a680fb34c12fa33f2d8b878

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 16:49

Target
2026-04-17_7a7132a556a0954d60e23b3a33c2c15b_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.4MB
Sample260417-vb5g2agv6x
SHA256 b7a3d526cdb124b229b7ed558e75f8d5aea19ee89a680fb34c12fa33f2d8b878
MD5 7a7132a556a0954d60e23b3a33c2c15b
SHA1 d4c6d0b3595c836da726c2f379219a5c89211179
SHA512 014560f5a4f8566f26aaf7361fc62a9fb6f9f7a1efbc3acd7ced9556f4df565238e040ff451d5e33abe8281eb4d989e8db8e868bb2985ef781701139165dfaa6
SSDEEP 49152:vwDn1d3So72nMbzd9VfWdzE1sNBk9/fw2BwfmM0f:Unh7Dd9FqA1sNi9Xwgwfo
TLSH
T11AC54A2EFE506C32D621013159A6B76D2168AD309A172E43A3587ECDFBF0FD16629733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3868	3824	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_7a7132a556a0954d60e23b3a33c2c15b_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_7a7132a556a0954d60e23b3a33c2c15b_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:3824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 8
  2⤵
  - Program crash
  PID:3868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3824 -ip 3824
1⤵
PID:3132