e0bb9e75fae2f549fe3fa41d2a632083f1d893d7494bd6c5f0d856762b0ffaa7

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/04/2026, 15:01

Target
2026-04-19_9e0f3b432567f25aea19110516fada85_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys_smoke-loader_vidar.exe
Size 2.2MB
Sample260419-sd17aadv4k
SHA256 e0bb9e75fae2f549fe3fa41d2a632083f1d893d7494bd6c5f0d856762b0ffaa7
MD5 9e0f3b432567f25aea19110516fada85
SHA1 582e9f297f4047a25d6ec4319a0c29ee660fd4c5
SHA512 feb6de08f2957ee065a357c39668a0d356460b0b060f832caf81aab4ae02cc59bf4a81baf0c61282ae46c4b0dfef35181c105ed731494b9356c9ac7a0422c35e
SSDEEP 24576:uWvWL0vbxSIa5jcAkSYqyEid4Kplkxf1IP+:hA0vb7ApYqCXp7m
TLSH
T1EAB58C12F6A48535E0B38175C9D3A796EA3278110B708BCB1385A27D2F73BD2AD35772
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4824	1364	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-19_9e0f3b432567f25aea19110516fada85_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys_smoke-loader_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-19_9e0f3b432567f25aea19110516fada85_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys_smoke-loader_vidar.exe"
1⤵
PID:1364
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 200
  2⤵
  - Program crash
  PID:4824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1364 -ip 1364
1⤵
PID:2328