bf235c335bb69ad64124be357a13bff98585538a6f86e533bcf82ddc89510db1

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 12:19

Target
2026-07-11_d7f97bf8ec66292d659ef6f1782655ae_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Size 5.6MB
Sample260711-phe8tsbz91
SHA256 bf235c335bb69ad64124be357a13bff98585538a6f86e533bcf82ddc89510db1
MD5 d7f97bf8ec66292d659ef6f1782655ae
SHA1 48ddc6cbcc2b719c79d23cf0653e20dd0d04bf1b
SHA512 aaa41b7883bcc9db4d2fb54fec80e0f84730bcaa7de3b7637a465776cb06c1c58f62ae326fa6f15efe6c9700ffc04e49b3d636d60630db1c63c76849bce3a853
SSDEEP 49152:hA0vb7ApYqg2butmkO+wAOInO4XrztygxLHkJE4VBjPji0AjvqJtb2I8UOlk0lP3:hAOY6fbs+wE9XD8VB7jozP1joI
TLSH
T103465B21F6F44675E0B3D179CAE2A656EE3238560B30C6CF1299876D2E237D18D36732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1504	1600	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-07-11_d7f97bf8ec66292d659ef6f1782655ae_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-11_d7f97bf8ec66292d659ef6f1782655ae_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe"
1⤵
PID:1600
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 232
  2⤵
  - Program crash
  PID:1504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 1600 -ip 1600
1⤵
PID:2516