891dc70a69aad703bfb7c6430178fcbfe139a100b37ad0985602140fd7448771

Analysis

max time kernel
149s
max time network
148s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 14:03

Target
2026-06-02_518564520da9e499fe8f1747d222d87a_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys.exe
Size 3.8MB
Sample260602-rcrqsae141
SHA256 891dc70a69aad703bfb7c6430178fcbfe139a100b37ad0985602140fd7448771
MD5 518564520da9e499fe8f1747d222d87a
SHA1 7fbbb3555a2d59b813fb470f4156aff330c4dcb4
SHA512 c2623e65d2cf731fa385b4131724a13141e4b002cec8ebb41471dcc52232ae9d07365a365348c0092e33725bf02daa5379d1800d938501a91734c36014089ce8
SSDEEP 49152:hA0vb7w56rn9TI956rdcN+Dzc9OBAXqwyOTdLPji0AjdpYqQY5v:hAO1rnBrdxzpAawzjo56m5v
TLSH
T131061759F2A44BA5D06F8074CA929656FA733C510F608BCB0290FE793F376D1997A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5944	5104	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-06-02_518564520da9e499fe8f1747d222d87a_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_518564520da9e499fe8f1747d222d87a_amadey_cobalt-strike_elex_hijackloader_maze_rhadamanthys.exe"
1⤵
PID:5104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5104 -s 200
  2⤵
  - Program crash
  PID:5944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5104 -ip 5104
1⤵
PID:6116