Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 19:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_b4d32e328c4b14ed512754eb61f64e22_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_b4d32e328c4b14ed512754eb61f64e22_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-12_b4d32e328c4b14ed512754eb61f64e22_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
- Size 840KB
- Sample260712-xtvrnafy2k
- SHA256 739a71901460de1ce6e77ebbd5b0360e5f3090fb2efe3ee955cdc8778bfdcec5
- MD5 b4d32e328c4b14ed512754eb61f64e22
- SHA1 77b07636672d6b09952f8b549ae42213431410c3
- SHA512 c8f0f2ac9bfe18798bc74eeff957717145b0ee73aff1cbf220f8cc2870ad25c98bca3397836ce04c7bee52c24b97d5f38a638e7dc184f978ec56bf4cc5ef6821
- SSDEEP 12288:uy+5+JL0dLo1d1W8vAwSfxL/2Dc3jDLLmt0LDQewsAjRcR4e2CGn:W5+t0pOdR4aewsAjmJ0n
- TLSH T134056A23EAA4C431D17719711A798712A938F9280B5146CBE3BC8F5D5930BF07B3DB6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1628 4332 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_b4d32e328c4b14ed512754eb61f64e22_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_b4d32e328c4b14ed512754eb61f64e22_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"1⤵PID:4332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4332 -s 2762⤵
- Program crash
PID:1628
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4332 -ip 43321⤵PID:4608