b12c198fc9fa41ac0cfaaed7b43b7d18f3d4ba9403a907471e5db7a00ca918a1

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/05/2026, 12:12

Target
2026-05-19_f7f0498cf14f22830ecabce62db62423_amadey_coinminer_darkgate_elex_glassworm_hawkeye_remcos_.exe
Size 4.4MB
Sample260519-pdhhdsfx2n
SHA256 b12c198fc9fa41ac0cfaaed7b43b7d18f3d4ba9403a907471e5db7a00ca918a1
MD5 f7f0498cf14f22830ecabce62db62423
SHA1 60455180d64523ad13789e2a1707bdf06058f4a0
SHA512 4432c16fe12c10c63f3f13d04a699ab4367d79a6783e79bed60daef0c06ffd4caaf535144be0cf381e6ea55ec3a2d6898275df2edd1f13c42c647d29ba53fd21
SSDEEP 49152:jirrNDS5lSvv9MRydB3IJhKPgssSt2gwDkYOMwwnMb4PmyVkDzx:SNDS5lSn9uWCJhv7StjYOXwnS4rVkDF
TLSH
T13926B3116ADA9231DC7D1D304F388174F5217C5FBEAEF9872E903A9DD9B31C4692A223
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4920	3880	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-05-19_f7f0498cf14f22830ecabce62db62423_amadey_coinminer_darkgate_elex_glassworm_hawkeye_remcos_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-19_f7f0498cf14f22830ecabce62db62423_amadey_coinminer_darkgate_elex_glassworm_hawkeye_remcos_.exe"
1⤵
PID:3880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3880 -s 8
  2⤵
  - Program crash
  PID:4920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3880 -ip 3880
1⤵
PID:3476