4f22b39fafbf990a9b1fda36058de48faff184d657ffdc1052cd5666fc8744b6

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 12:32

Target
2026-06-02_857f5f782ba95442bae6240ebd796a50_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop.exe
Size 1.9MB
Sample260602-pq4amadt21
SHA256 4f22b39fafbf990a9b1fda36058de48faff184d657ffdc1052cd5666fc8744b6
MD5 857f5f782ba95442bae6240ebd796a50
SHA1 5fd5a2d50fb67e2d721bc811be1739cc516d76d7
SHA512 9b9fe108d5ac033f8c09fd33a4ebaf87dbba090229c9c63e016bba5ad646af528c85c4e478823fa76d5337ab1e82d523860d6b48a970a54ab342480554614faf
SSDEEP 24576:05v3H67p4x4rH54GXtA5EYTqMi8CtBd2QHCHmTBW5snp0V5jcAkSYqyE:8H676x4DHteqJtb2IZ07pYq
TLSH
T137955C11F6B48675E0B3C17AC9E2979AEA7238415B308BCF1385976C2E336D2D935732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3596	4848	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2026-06-02_857f5f782ba95442bae6240ebd796a50_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_857f5f782ba95442bae6240ebd796a50_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop.exe"
1⤵
PID:4848
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 236
  2⤵
  - Program crash
  PID:3596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4848 -ip 4848
1⤵
PID:2156