e8c587809f1156e903b14d8bfe7d903348550a6e900e57ba0854407e34859369

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 09:25

Target
2026-04-15_abe9d0b1922daf81310761d7ee25de64_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
Size 2.6MB
Sample260420-ld45lsaw2w
SHA256 e8c587809f1156e903b14d8bfe7d903348550a6e900e57ba0854407e34859369
MD5 abe9d0b1922daf81310761d7ee25de64
SHA1 aa6f7eb0717e80712c713af67bda7d7010bf12b7
SHA512 0f530570028914e36105c458e0e98a4ad03c5d233e6a44aedea995f70f215288575a4e2eefe390c6e51e997d68c9137b14623d3e718a172f2bb06aa83181d793
SSDEEP 49152:0vswnNTBksNBk9/fw2BwfmM0f3btL2tLYIgjdsk9WnO:mqsNi9XwgwfozV2VHgjOk9WO
TLSH
T18AC5BF12F7E48472E6B242315AB9B724757DBC311F25A3CB73A89B0E1E712C19A32753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3320	4340	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_abe9d0b1922daf81310761d7ee25de64_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_abe9d0b1922daf81310761d7ee25de64_amadey_darkgate_elex_luca-stealer_njrat_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:4340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4340 -s 8
  2⤵
  - Program crash
  PID:3320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4340 -ip 4340
1⤵
PID:2152