8fc681baeb3c0265c3c0642a49749de24946e19241d9de96d737297a14e59cbe

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 13:32

Target
2026-05-28_5e1fc826501e7b8fbd8346aa6dabf8ce_amadey_darkgate_elex_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
Size 2.0MB
Sample260528-qs1sysg15j
SHA256 8fc681baeb3c0265c3c0642a49749de24946e19241d9de96d737297a14e59cbe
MD5 5e1fc826501e7b8fbd8346aa6dabf8ce
SHA1 44c2f2a317ffb59231065ec3bf8077ab5233261c
SHA512 8242706dcdda274ef7d6f9a91c069aa40c3bc5de307b1ee453695242849550046e6e617466d7d3879bd35cf646b88227b19f76a0a85abf9132848a30c349be63
SSDEEP 49152:NJiV66faWoGODTP1xVFchS9mK5JLvzlaVsrPa0Pdswk9:PLGS9mKAKC
TLSH
T19EA53A0277F88135F1F36B709EB993649A77BD61AD39C14F3388165E0EB0A809A35727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2388	5024	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-05-28_5e1fc826501e7b8fbd8346aa6dabf8ce_amadey_darkgate_elex_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_5e1fc826501e7b8fbd8346aa6dabf8ce_amadey_darkgate_elex_mafia_manuscrypt_rhadamanthys_smoke-loader_stop_tofsee.exe"
1⤵
PID:5024
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5024 -s 8
  2⤵
  - Program crash
  PID:2388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5024 -ip 5024
1⤵
PID:2228