a789808e3e17fe204cdded58b817cb54526825f8cfc2a152e95f23b3626c3514

Analysis

max time kernel
149s
max time network
106s
platform
windows11-21h2_x64
resource
win11-20250610-en
resource tags

arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system
submitted
11/05/2026, 12:34

Target
2026-05-11_14a8776ace3ac65ec924e50b69a06e84_amadey_cloudeye_darkgate_elex_hijackloader_wannacry.exe
Size 2.4MB
Sample260511-pr1wwsh171
SHA256 a789808e3e17fe204cdded58b817cb54526825f8cfc2a152e95f23b3626c3514
MD5 14a8776ace3ac65ec924e50b69a06e84
SHA1 231576c6bdc14d838c910b402704047dfe5c7561
SHA512 0065197af685471eb1a18bb623a788b9a69f6e3417ca37868b3fd06a8b7997749a4bfbb79ee3c5306d2418878f1eb882aee064db95eccceb5418be4952d35ded
SSDEEP 49152:0jrOO53RTqtigC+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXc:0jrOO539+RYNAKvkTgXuquveY+W2o8oO
TLSH
T1E7B56B02B7E485B2E1B75A319CB6B7369675BC601E31C78F1340F68D4E32790E926B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5148	3584	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\2026-05-11_14a8776ace3ac65ec924e50b69a06e84_amadey_cloudeye_darkgate_elex_hijackloader_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-11_14a8776ace3ac65ec924e50b69a06e84_amadey_cloudeye_darkgate_elex_hijackloader_wannacry.exe"
1⤵
PID:3584
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3584 -s 8
  2⤵
  - Program crash
  PID:5148

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3584 -ip 3584
1⤵
PID:5976