7af973f760769b5bdfa5332d5b5c51540a5b053c8699bece17cbeea4b66bea69

Analysis

max time kernel
149s
max time network
109s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 16:03

Target
2026-05-23_50faff76dc3a3ba7d742546f12b475e2_amadey_darkgate_elex_glassworm_icedid_maze_njrat_rhadamanthys_stop.exe
Size 3.6MB
Sample260523-thnmesfw4x
SHA256 7af973f760769b5bdfa5332d5b5c51540a5b053c8699bece17cbeea4b66bea69
MD5 50faff76dc3a3ba7d742546f12b475e2
SHA1 5284e160f4bcb7d42b18bdc17403266d18a535fc
SHA512 7aee8f59dbe705105365c9752fd270fac4520ea964fcccb735891800525698dc18daa8e2026e07f9c706334bba648954502481e0fe67c961e0d9dee8747daf78
SSDEEP 49152:teODoHF+3j5D78OBUgM84pTIR8leW4SkZP4sz9MbEKzq+9G:tetCs1xfTIipfkZcPU
TLSH
T18606F911B6FE8732D87184748FBD9659A5303C409BA1CA8B2150BAADEE735C8593F733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4660	4780	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-05-23_50faff76dc3a3ba7d742546f12b475e2_amadey_darkgate_elex_glassworm_icedid_maze_njrat_rhadamanthys_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_50faff76dc3a3ba7d742546f12b475e2_amadey_darkgate_elex_glassworm_icedid_maze_njrat_rhadamanthys_stop.exe"
1⤵
PID:4780
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4780 -s 236
  2⤵
  - Program crash
  PID:4660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 4780 -ip 4780
1⤵
PID:2456