b95535d86cbd18df40b46f59b7d4222800e909c9bbe22d00a7e376adab9c621c

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/04/2026, 12:44

Target
2026-04-24_4adfd220adea159db066d519a76974c0_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_he.exe
Size 1021KB
Sample260424-pyfvasax8k
SHA256 b95535d86cbd18df40b46f59b7d4222800e909c9bbe22d00a7e376adab9c621c
MD5 4adfd220adea159db066d519a76974c0
SHA1 b144c55af40e6df35e3ea7263fc0e153d1cf70e3
SHA512 8ca795f1f90eea12cf6165b71f5742420e23834313c238a94b15cce8f3010127e9a0e8a259d4e3f1c8f7317a269a6edb0e792ef8327ce73e29e1623f47c2912d
SSDEEP 12288:snEy6xMGNTCWsTGQ4/RvGLD0hng52lF4Y+CuaNNU+aKgh:snt6xDxRuMC2lF4Y+CuaNCVKg
TLSH
T1F7253812A7F5A5A1F2B32A306EB6D6115A3ABDB20F21C16F9364775D4D31AC09D30B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4808	4728	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-24_4adfd220adea159db066d519a76974c0_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_he.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-24_4adfd220adea159db066d519a76974c0_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_he.exe"
1⤵
PID:4728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 8
  2⤵
  - Program crash
  PID:4808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4728 -ip 4728
1⤵
PID:2364