323ad325a08e69d96c624c09e06b77a9857f08525c77e8807b13d510a52c2940

Analysis

max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 16:17

Target
2026-05-03_7b57c3afa43fe5d5d4142a73e44b3ca2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.7MB
Sample260503-trdhtads71
SHA256 323ad325a08e69d96c624c09e06b77a9857f08525c77e8807b13d510a52c2940
MD5 7b57c3afa43fe5d5d4142a73e44b3ca2
SHA1 6abd2ea561f1368f19446edc779ebe85dde20e87
SHA512 4cecf3ad9301530e7ca29da9d524c47101b91d053a3e3ff69b4732d2b3f3c8545676358cddd61d6e25bb1a1e82ee04c4b1e2210341d199ab0cb98bc0c3adb310
SSDEEP 49152:1sNBk9YZqhaK6zbfqdlnO7Hhp/hKPgssSt2gLLnHFLHkJEO:1sNi9YxbHhp/hv7St3Di
TLSH
T196D55A12B7F48035F1F36B719DB59262AA76BC215F35C68F2380265E1E72AD08A35733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
684	3408	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-05-03_7b57c3afa43fe5d5d4142a73e44b3ca2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-03_7b57c3afa43fe5d5d4142a73e44b3ca2_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:3408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 8
  2⤵
  - Program crash
  PID:684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3408 -ip 3408
1⤵
PID:5036