f7624f3b0ebbc961a5852c19d51d698f51be3ac6047a42555a1a215ebe3d35ee

Analysis

max time kernel
149s
max time network
161s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 17:53

Target
2026-04-23_7d02bffc1aedd90e766fad903638c748_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Size 798KB
Sample260423-wgl4bady2w
SHA256 f7624f3b0ebbc961a5852c19d51d698f51be3ac6047a42555a1a215ebe3d35ee
MD5 7d02bffc1aedd90e766fad903638c748
SHA1 ee3f597f19e65ac6dfe7c01e6a584122995a8fc0
SHA512 3a376b5cbb0a780ad30b1430b0377d8bc30c4bb5f03109be73ad96673fb0ca6100bdbb23aa4e228de261af433c4f943b94ce5bc1a82ae620d444f6f048f30749
SSDEEP 12288:snEy6xMGNTCWsTGQ4/5zAwSfxL/2Dc3jDLLmt0LDQewsAjReI:snt6xDxmaewsAjUI
TLSH
T130055B62EE74E4A2C3BB0C709F65C7016639BE700B111ADBE2A8B76D8D312D16F35D16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4712	4884	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-23_7d02bffc1aedd90e766fad903638c748_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-23_7d02bffc1aedd90e766fad903638c748_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"
1⤵
PID:4884
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 8
  2⤵
  - Program crash
  PID:4712

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4884 -ip 4884
1⤵
PID:2308