6ea7ec05718edac343038c2a4f908abca71b72ca6ac7d7b8c28cf1d035d8146d

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 13:06

Target
2026-05-07_e98c09c1cebfd32b1f0f431c985373a2_amadey_avoslocker_coinminer_elex_hijackloader_smoke-loader.exe
Size 1.1MB
Sample260507-qchx7set9v
SHA256 6ea7ec05718edac343038c2a4f908abca71b72ca6ac7d7b8c28cf1d035d8146d
MD5 e98c09c1cebfd32b1f0f431c985373a2
SHA1 7a4820d4a486df68836f7b131bf21d8fb6efa207
SHA512 9f8fe493f67431af06f662f011aec3831bd7ca52d59883389d6a0dc51794e5d2597c514b60409d479f11fbb37ad5bb5ae9e5b4cce72b21f7a88546a7335e2058
SSDEEP 24576:kmA5EiTj9BOkUhMXcBwcCro4MIxcnvXwSevbaZhEzV:Kn3UasqcVWmnf4baczV
TLSH
T18B35CF32A6A44036D1F31572ED74D1307E78B5282B20C5AF9394AE2D2E756D2AFB7313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2072	1064	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-05-07_e98c09c1cebfd32b1f0f431c985373a2_amadey_avoslocker_coinminer_elex_hijackloader_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-07_e98c09c1cebfd32b1f0f431c985373a2_amadey_avoslocker_coinminer_elex_hijackloader_smoke-loader.exe"
1⤵
PID:1064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1064 -s 8
  2⤵
  - Program crash
  PID:2072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1064 -ip 1064
1⤵
PID:4144