b6119c0873a0de0b5ad91ad46dfca154de08fe537c04fac0f5aa6a02d81d29e2

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 14:19

Target
2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt.exe
Size 1.2MB
Sample260418-rnaxeaby2n
SHA256 b6119c0873a0de0b5ad91ad46dfca154de08fe537c04fac0f5aa6a02d81d29e2
MD5 add50c3e7251cbf6ba58f394f9176cf3
SHA1 134873433e3dfc0893546c3008ec60d8231203af
SHA512 38cd997212dc2d4bb7f7e8f4cd40a9cd97c5233291df440a59910ce9889a0ae9642d79700891d62e8aae1fdefc31b8b7c10e0f7d8faf62954391a0ddb94790ed
SSDEEP 12288:Tg1JZlT/sBLrHPgiFgtcYn7FiwtOw6BaxtOw6BaKKi8C+lPYkiM+FSD:Tg1flT/AIiIcaL6BO6Bwc+lPYBnID
TLSH
T11945291376904032D0632530656E961E8635FC1ECB539EDB57AC2FCEFBE16E06A39236
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
6000	2832	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-18_add50c3e7251cbf6ba58f394f9176cf3_bkransomware_darkgate_elex_glassworm_karagany_manuscrypt.exe"
1⤵
PID:2832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2832 -s 8
  2⤵
  - Program crash
  PID:6000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2832 -ip 2832
1⤵
PID:4028