Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 15:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
- Size 2.6MB
- Sample260415-s6s2daex61
- SHA256 9739a5f930fefe1dfffdb1370f7801b9395f8f43fafd7c8162ca719b3b531578
- MD5 757296dc3c739c265643d753ae20c2cb
- SHA1 d04c87d493b8dfb6ab74515518434ce60853b1e0
- SHA512 8260cbdc14ca486a9b1a631002d635c45c39f01a402c638b16588f5287b433daead5df23cf1ffda492417fda4db37404700ef4864aa35d434604009cc13fbf9b
- SSDEEP 49152:Uk9hKPgssSt2gShbuRKwpBTbutmkO+wAOInO4XrztygxLHkJE4VB3:F9hv7St4H7s+wE9XD8VB3
- TLSH T1F3C56B02B7E48079F1B367719EB59321AA76BC705F35C68F2380265E1E72AD09A35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-15_757296dc3c739c265643d753ae20c2cb_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4260