0f80eaa0933ce1398d3d39dc4af7ada0672d1c0cec64052f9e5f3ebe82dc552c

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 04:36

Target
2026-07-06_2f688b57f5db532425aaaa483e468c36_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Size 983KB
Sample260707-e8m19aez6k
SHA256 0f80eaa0933ce1398d3d39dc4af7ada0672d1c0cec64052f9e5f3ebe82dc552c
MD5 2f688b57f5db532425aaaa483e468c36
SHA1 ae4911711559a1ecec0bca8c565f42c5acdb8529
SHA512 5e17056f0fbe680dd81a9f3a2318ed4eda60f3fc0ee68eb37b0f2ceb7914be7a54ea27ae896be56a5637b1aa2ae1e1af36be01955fff35227b6187f6e60cc65f
SSDEEP 12288:uy+5+JL0dLo1d1W8vAwSfxL/2Dc3jDLLmt0LDQewsAjRcR4g0Qe4VQjGARQNhiB:W5+t0pOdR4aewsAjmrvyCAR0iB
TLSH
T11D256B23FA60C432C17619711AA98721A638FD240F514A87E3BC7F6D5D306F1773DAAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3376	1132	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\2026-07-06_2f688b57f5db532425aaaa483e468c36_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-06_2f688b57f5db532425aaaa483e468c36_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"
1⤵
PID:1132
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1132 -s 224
  2⤵
  - Program crash
  PID:3376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 1132 -ip 1132
1⤵
PID:4052