443881aafeeea55fbfab369867add02ef0b3813d3323df8158b9bd005a1aae08

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 11:38

Target
2026-04-22_a1fb7f27ad44f13cde68833b4ec4d1fb_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
Size 975KB
Sample260422-nr678sav21
SHA256 443881aafeeea55fbfab369867add02ef0b3813d3323df8158b9bd005a1aae08
MD5 a1fb7f27ad44f13cde68833b4ec4d1fb
SHA1 8bf415fa11ef86b9a38e1b7298ec0cbf138d735e
SHA512 1a7f7bebffa955d13a33136f2c2246e8ab915864c6b4863b7f4b397bfbe2422133ae329f92d8baf66a4441d3574b0fe10cfb136e5665c94f451792209bba7791
SSDEEP 12288:snEy6xMGNTCWsTGQ4/g2YzemGz00vHyvTCXdXikLj2jR7trg6Qi3vYsKTS:snt6xDxg2vVI0vHyyLj8trn3wsp
TLSH
T115258E26F9A4E4B2C27714308E55C750A739FEB10B1146EBA3E4F77D9E326C0AF24925
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5224	3444	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-04-22_a1fb7f27ad44f13cde68833b4ec4d1fb_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-22_a1fb7f27ad44f13cde68833b4ec4d1fb_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe"
1⤵
PID:3444
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 8
  2⤵
  - Program crash
  PID:5224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3444 -ip 3444
1⤵
PID:3780