40f3d0d43477c241ccf210f81f35978665f938dc142493dec5159022deec6eda

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 17:39

Target
2026-10-30_c3c86dd57be9414f76a231b30552f312_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Size 826KB
Sample261030-v8kh5azzbs
SHA256 40f3d0d43477c241ccf210f81f35978665f938dc142493dec5159022deec6eda
MD5 c3c86dd57be9414f76a231b30552f312
SHA1 5bdacb61ea160373c1ba64f27305304234b9be35
SHA512 8c5f846171d6a5439ced9cb374abb621ea54135aea05a0764d9232b9d32e89030009b885dd343245ca7c7c1d66e96042d337ca4e6275a53961d48acc31dbcf0a
SSDEEP 12288:uy+5+JL0dLo1d1W8vAwSfxL/2Dc3jDLLmt0LDQewsAjRcR4G6Rx1Tx0D:W5+t0pOdR4aewsAjm7CTTx0D
TLSH
T18A056C23FA60C432C577197116A98711EA3CF9280B510AC7E3BC8F6D5924BF1773DA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4124	2108	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2026-10-30_c3c86dd57be9414f76a231b30552f312_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-30_c3c86dd57be9414f76a231b30552f312_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"
1⤵
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 276
  2⤵
  - Program crash
  PID:4124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2108 -ip 2108
1⤵
PID:4296