86cc6cf8677c6b9730109fe0ccf48229034e2a07a44490fbf56790f3782a0728

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-16_1529fbd8e92438c74554adb4b7f4550e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 1.5MB
Sample260416-rt355sa17p
SHA256 86cc6cf8677c6b9730109fe0ccf48229034e2a07a44490fbf56790f3782a0728
MD5 1529fbd8e92438c74554adb4b7f4550e
SHA1 05f2d400d2d87e618c3b998e3f4031b2bd32682d
SHA512 6a33090c879c50b8f88be2b954a57226f5d758aef5a8c7cab0da4eb825e80544d5284627671f0ba69e071e78b079cd88bad64a8ff09c2367b47b66df67dc6d42
SSDEEP 24576:ePjO7KX53RTh0tFda3gcuzKPgssStPUvgHEstBPpoA:erOO53RTqtighKPgssSt2gksjP
TLSH
T16565290277E98079F1F36B719EB992659A77BC615F35C64F23C0125E0EB0A909A32733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-16_1529fbd8e92438c74554adb4b7f4550e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-16_1529fbd8e92438c74554adb4b7f4550e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_1529fbd8e92438c74554adb4b7f4550e_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads