42069363e29f2b25385b62c5912c8dcd16c2aa35dbc3ad77d830823e7c05e962

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/04/2026, 19:05

Target
2026-04-17_0c66a6fcd803f67469c2006899aeb9cc_cloudeye_coinminer_darkgate_elex_glassworm_luca-stealer_.exe
Size 4.2MB
Sample260417-xrhdjsf12p
SHA256 42069363e29f2b25385b62c5912c8dcd16c2aa35dbc3ad77d830823e7c05e962
MD5 0c66a6fcd803f67469c2006899aeb9cc
SHA1 4945dcee70ab935f512d0a29b635b9de750f6434
SHA512 db16c76ce7947ab73804765c1f07184093f44e967290d80a454e893c9502184fe945626d68ff3929de71381d5b6ce8a3998c2cad39e2f84509c72fc777b5a0dc
SSDEEP 49152:W2abzE7wnNTBzf0g7mM+M6RkMkIM7I0678xzQoJdXN0BMOwLloBrugtxz:mAEoM+M6RkMkIM77JdXN0B7+s
TLSH
T131166B11B6A48031EC7E0E704A659631F435BD6F7F2DB28BAE94761D09737C16A32B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5184	5072	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-17_0c66a6fcd803f67469c2006899aeb9cc_cloudeye_coinminer_darkgate_elex_glassworm_luca-stealer_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-17_0c66a6fcd803f67469c2006899aeb9cc_cloudeye_coinminer_darkgate_elex_glassworm_luca-stealer_.exe"
1⤵
PID:5072
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 8
  2⤵
  - Program crash
  PID:5184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5072 -ip 5072
1⤵
PID:420