d6d2c103debc0406d3cd3def888a5bf98f33934243791a34e211b94dcac8f6d2

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/04/2026, 15:14

Target
2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadam.exe
Size 1.7MB
Sample260419-smlsysay7w
SHA256 d6d2c103debc0406d3cd3def888a5bf98f33934243791a34e211b94dcac8f6d2
MD5 accf3737950338fe3c1b206f51467e92
SHA1 c6132cfd2b9eda6075f514607c4df5b2601427ea
SHA512 3d08b18927caf221629fb7c785376480599164fb869c348bc502bcdd2982cdc85f41f59dead92b045506a94ffb9b3a4b430e0ed95ad903c9f841451b91264b46
SSDEEP 24576:uWvWL0vbxSIWD5TvinrmpErQe35tauKf91R:hA0vb7w56rv5ta1LR
TLSH
T119858C5572984FB5D16F42748A618961EA77BC214F209BCF03D0BEBE3E376806D2E217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
696	908	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadam.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadam.exe"
1⤵
PID:908
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 908 -s 200
  2⤵
  - Program crash
  PID:696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 908 -ip 908
1⤵
PID:432