dc27b47f37bb7e1b02730faf597d6959f062475d0336a9541f87479267a0ece2

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 20:26

Target
2026-08-24_f0fdbe97593ae5caf1c6fbef204780ac_amadey_darkgate_elex_glassworm_smoke-loader.exe
Size 23.5MB
Sample260824-y8a68starg
SHA256 dc27b47f37bb7e1b02730faf597d6959f062475d0336a9541f87479267a0ece2
MD5 f0fdbe97593ae5caf1c6fbef204780ac
SHA1 0d027dd6e82f68e1ff5f487e827ac5bd612de3d3
SHA512 79cd9764cda49321504b8f2e9091dc40bef21a93ae364836dd55e444dba1185426056659b1afc964dabdc8567eb5577385ba7abbdb0f3286f354c5e14c8477b4
SSDEEP 393216:ChUdLP0JHrEGOXhVxGw4ssd4eQd73g2nVFhZVQlwEeD:AUIHrE7xn62VFxQ9
TLSH
T13A47D050F3A620F2CA4B15B064B97B0E9A355AC06B104FD7F36C2D59AF233D1B47B25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3368	3468	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-08-24_f0fdbe97593ae5caf1c6fbef204780ac_amadey_darkgate_elex_glassworm_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_f0fdbe97593ae5caf1c6fbef204780ac_amadey_darkgate_elex_glassworm_smoke-loader.exe"
1⤵
PID:3468
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3468 -s 232
  2⤵
  - Program crash
  PID:3368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 228 -p 3468 -ip 3468
1⤵
PID:4728

memory/3468-0-0x0000000000400000-0x0000000001BC4000-memory.dmp

Download

memory/3468-1-0x0000000000400000-0x0000000001BC4000-memory.dmp

Download