Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 03:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_64933867c2d875060fed7f01ba42c454_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_64933867c2d875060fed7f01ba42c454_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
General
- Target 2026-07-06_64933867c2d875060fed7f01ba42c454_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
- Size 754KB
- Sample260707-dwlf8agy6y
- SHA256 e666c5f8a19f1df7097653d6fa4177dc2129939ef3f3dd99d46f0cce9d9dcd0f
- MD5 64933867c2d875060fed7f01ba42c454
- SHA1 6609138bf38deb34b7a3efce2e4c524fe4cc88f6
- SHA512 7e5c67c1e654597f873e83cdf5c60ea4b800c538f13e89815aaff282ed09ff27fa8fb32728c573c6464579899fb9c8a46d974e4ee511d380a54c29507cf70583
- SSDEEP 12288:uy+5+JL0dLo1d1W8vAwSfxL/2Dc3jDLLmt0LDQewsAjRcR4eo:W5+t0pOdR4aewsAjmJo
- TLSH T113F46C23FA64C432C577197116A98712E93CF9280B510AC7E3BC8E6D5934BF1733DA6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1460 2884 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-06_64933867c2d875060fed7f01ba42c454_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-06_64933867c2d875060fed7f01ba42c454_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"1⤵PID:2884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2884 -s 2762⤵
- Program crash
PID:1460
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2884 -ip 28841⤵PID:5532