d5457f61b6149570631d76cc787aebdaee415be95bb31fb3f0abc1049d9cf4b7

Analysis

max time kernel
149s
max time network
124s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 11:40

Target
2026-06-06_5647f24b03ac34101b1fd1302e30763c_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat.exe
Size 1.8MB
Sample260606-ntcfmscy4s
SHA256 d5457f61b6149570631d76cc787aebdaee415be95bb31fb3f0abc1049d9cf4b7
MD5 5647f24b03ac34101b1fd1302e30763c
SHA1 ff596c8cc232eb7f4cd8db5f7bb8a7026ce565df
SHA512 1acaa8b39ec6ac22c8d49d1ad0ac82317e6f03def7209ea79531d662e65b13ca819f7ad4f9c1480ea8e05f07a8aea697513b22e6c6aefa9b1a6ab1ebeafc072a
SSDEEP 49152:bKCUEzBKKe1YeEAYOW1+M5A83M+svqia/:bjz0KsW1+M5Nn
TLSH
T1D095391277E95A29F0FB6731AEB851605A777C615F31C6CF13801A5E3970AC09A3AB33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4632	1824	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-06-06_5647f24b03ac34101b1fd1302e30763c_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-06_5647f24b03ac34101b1fd1302e30763c_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat.exe"
1⤵
PID:1824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1824 -s 8
  2⤵
  - Program crash
  PID:4632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1824 -ip 1824
1⤵
PID:2244