557bfd6e86aa55b0405cce453567e28b0f051325cccf005247952624a1465f06

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/09/2026, 23:49

Target
2026-09-12_6e5f2d419580f2bb86fad7124be4175c_amadey_dharma_elex_icedid_remcos_smoke-loader.exe
Size 5.6MB
Sample260912-3vd37axfla
SHA256 557bfd6e86aa55b0405cce453567e28b0f051325cccf005247952624a1465f06
MD5 6e5f2d419580f2bb86fad7124be4175c
SHA1 4637578640ca80bb7a712777f0d64795dcb5e684
SHA512 2c55367227a1388a8a2808c9d9a3142247e3c5763ee6f6ebe2edc133372fbb60eab6d5983b92b6e2cd59c84961192080610ab1711db649f73f0aa071735147d1
SSDEEP 24576:aVbIz6jaAQ4tEjNgWajACEvJ9HvageHNiquN8M7+Oitm50DUPZmLmM00:2w62AQFyCS5PFyMB
TLSH
T188569D00FB918132D4BB25B94AFB132A5A39EAE007D492D753D479ED5E253E03E3934E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
5080	1500	WerFault.exe	86
5044	1500	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\2026-09-12_6e5f2d419580f2bb86fad7124be4175c_amadey_dharma_elex_icedid_remcos_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-12_6e5f2d419580f2bb86fad7124be4175c_amadey_dharma_elex_icedid_remcos_smoke-loader.exe"
1⤵
PID:1500
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 252
  2⤵
  - Program crash
  PID:5080
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 256
  2⤵
  - Program crash
  PID:5044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1500 -ip 1500
1⤵
PID:4608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 1500 -ip 1500
1⤵
PID:3360