81d7421266793fa9ba72bc3ad426a377ec7bf08342f590f9df840f008ff2aca8

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 08:40

Target
2026-07-20_d4513c84bbebefaab2d633d3a273f5db_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Size 36.8MB
Sample260720-kkt3jsby4j
SHA256 81d7421266793fa9ba72bc3ad426a377ec7bf08342f590f9df840f008ff2aca8
MD5 d4513c84bbebefaab2d633d3a273f5db
SHA1 528a808d6ae8ec894afd6aeaba2fd722a57a84f2
SHA512 82c8fd64bce32425e200afaac2bf6d52c40e0ab1144d5013f89a78db33fbbbe0c0897d72a55ac45ddf1457ba7c14729ead8c14118531717261efe4a9ee164f5b
SSDEEP 393216:2wlg2jYHJRHPt+eibH0lgo/CyUAJazRsvrREDrSeFpZ4ne58lVSTBIma5:plg2YphPt+e2HoYswrvkplVSTBIma5
TLSH
T1A187DF22F510C26ED98141F1687CAF2D773C5F941FA94BCB62C82D797A315C2A737A22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4128	2448	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-07-20_d4513c84bbebefaab2d633d3a273f5db_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-20_d4513c84bbebefaab2d633d3a273f5db_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe"
1⤵
PID:2448
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2448 -s 232
  2⤵
  - Program crash
  PID:4128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2448 -ip 2448
1⤵
PID:3304

memory/2448-0-0x0000000000FF0000-0x00000000034DD000-memory.dmp

Download