38a30cc53b7e25cd0e34f3a24ca2d54418701d3ffaee45b5e8e5580cbe292388

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 16:26

Target
2026-05-29_b9f0fcade960675f2b5397ed89dd3bbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Size 810KB
Sample260529-tx163ahs2t
SHA256 38a30cc53b7e25cd0e34f3a24ca2d54418701d3ffaee45b5e8e5580cbe292388
MD5 b9f0fcade960675f2b5397ed89dd3bbc
SHA1 dd36cee297a822e48ecb2f53e5b94cf33d5256f4
SHA512 5912cdfdbe4f72a984b5e1a1bb1e5c8dc5e6c6c9ffd3ff2a9775ad94ce9e4968099caed7702ebbdb6cb2153e647902140128431a85dd2cbdc88c0ac48261b66c
SSDEEP 12288:9+5EM3H677d4xpVbuxrqSx54G2nCtAqOm5yOvei3DawYrIkb/JUkyv5K/O:05v3H67p4x4rH54GXtA5HhrxLCIG
TLSH
T19B059D01B7E184B6F5B707339DB68265AB7ABC616D31C70F23901A0DAF31691AF34762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4380	4316	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-05-29_b9f0fcade960675f2b5397ed89dd3bbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_b9f0fcade960675f2b5397ed89dd3bbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
1⤵
PID:4316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4316 -s 236
  2⤵
  - Program crash
  PID:4380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4316 -ip 4316
1⤵
PID:2036