79ed762762f72b648ebdb3d59d9709db53dabd881346fc95efc0bc3a83694bc1

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 12:00

Target
2026-05-04_b880f1741946bc6119e9927fd383ad10_amadey_darkgate_elex_glassworm_smoke-loader.exe
Size 23.3MB
Sample260504-n6fc3aev7n
SHA256 79ed762762f72b648ebdb3d59d9709db53dabd881346fc95efc0bc3a83694bc1
MD5 b880f1741946bc6119e9927fd383ad10
SHA1 73534e6c877d5c71ea694b3f0f584dd890945e48
SHA512 ea2874a40c239d4578d5de79ccc3ae523eb7007f529baf1bb8fd64840361503381d6005a6a4e92871ae0db45259795b1946ba1248ccbfbc3307174ac07667dd8
SSDEEP 393216:daAO2RsLwzjQJRTsfMdjxEKJfZ32WYWIjgWrRkBlT:4AOHLwz7y2B/gcRkT
TLSH
T1AB37C051F7A610B1CA8B25B068B97F1E5B355AC063244FDBF25C2D59EF322C0B07B25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2500	4036	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-05-04_b880f1741946bc6119e9927fd383ad10_amadey_darkgate_elex_glassworm_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-04_b880f1741946bc6119e9927fd383ad10_amadey_darkgate_elex_glassworm_smoke-loader.exe"
1⤵
PID:4036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4036 -s 196
  2⤵
  - Program crash
  PID:2500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4036 -ip 4036
1⤵
PID:820