a48e87cc0c6124c9ab73bb02c45ced9c6dd6ca1f42e69e146f569f6cbd30ca67

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 12:20

Target
2026-07-19_f40ca582f8d130caea0ab1d3f0bfab2b_acrstealer_darkgate_elex_gcleaner_glassworm_remcos.exe
Size 13.0MB
Sample260719-phzbpsaz4m
SHA256 a48e87cc0c6124c9ab73bb02c45ced9c6dd6ca1f42e69e146f569f6cbd30ca67
MD5 f40ca582f8d130caea0ab1d3f0bfab2b
SHA1 938298a696da1c48ae6640a0987cac6e4a38799d
SHA512 862c9a2215e8f10d12d045de29d657cf56d52feedc05e8933fb91e4ebe54006c94c593bae93901b38ccc6cc539f504d75ff364030d355bd3749f5a99d8ff3557
SSDEEP 196608:V8DMZB77qBdcYhlTQlEbR+ZyrvGChnepRahxMZLezz2:V8DMZF3YhRcZyaChneL
TLSH
T100D67C16B388D53EC0670B32583789906E7B7F612E16DC9B7BF43A4C0F39541AA3A54B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3536	3880	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-07-19_f40ca582f8d130caea0ab1d3f0bfab2b_acrstealer_darkgate_elex_gcleaner_glassworm_remcos.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_f40ca582f8d130caea0ab1d3f0bfab2b_acrstealer_darkgate_elex_gcleaner_glassworm_remcos.exe"
1⤵
PID:3880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3880 -s 300
  2⤵
  - Program crash
  PID:3536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3880 -ip 3880
1⤵
PID:5948