3079267dfea78d4288c0ea8b64a395ae78253f4c68f63f0716e62378c1e277d0

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 20:03

Target
2026-10-10_1a5d969eca82a9b0ff054d32f990c0ba_darkgate_elex_glassworm_mafia_revil.exe
Size 12.1MB
Sample261011-ysqa8agd56
SHA256 3079267dfea78d4288c0ea8b64a395ae78253f4c68f63f0716e62378c1e277d0
MD5 1a5d969eca82a9b0ff054d32f990c0ba
SHA1 895186541485ebf63cfb75c0d3dcc5c1e9c56826
SHA512 90433385f85e907c9d2b4fcda585b07fb29b4945e27273f39e796e6fb6b04ccccee513f1a1261e383e43ad6bbc13680e103906dcebc131c53c2de5c6c4710507
SSDEEP 393216:gT4g+29rAMd2fUKVuiEhtO8JVngReH2xUs77/4knML:gT4j29p2F+2xUy7/4knML
TLSH
T109D6D052F7D610E1CAC950B1687C3B0F693A884463255FCB92A86D5EED322D0A5FF34E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3800	4952	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-10-10_1a5d969eca82a9b0ff054d32f990c0ba_darkgate_elex_glassworm_mafia_revil.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-10_1a5d969eca82a9b0ff054d32f990c0ba_darkgate_elex_glassworm_mafia_revil.exe"
1⤵
PID:4952
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 232
  2⤵
  - Program crash
  PID:3800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4952 -ip 4952
1⤵
PID:5444