8b5aa4c64c897f46db8f4748449d70ccfd59b4302dd84348bd7272c2185a884e

Analysis

max time kernel
149s
max time network
140s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-16_59ca646cb1f12af6f46794542a9d2600_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 3.0MB
Sample260416-txja9ahz21
SHA256 8b5aa4c64c897f46db8f4748449d70ccfd59b4302dd84348bd7272c2185a884e
MD5 59ca646cb1f12af6f46794542a9d2600
SHA1 0c49d9b4e1898579ab3fa48dd8eef3b3e9d5de16
SHA512 53301f6af21160444fabfb90cb67322d2349dd8158efd5d7b23a4276e81e88ebfea4e97c104b75213e5cfc7a1844cddad3a9e7138353375a439392453538b993
SSDEEP 49152:erOO53RTqtiMv9M3Igjdsk9WnOWS9KcY/ohKPgssSt2gB:erOO53k9xgjOk9WOWOfhv7StX
TLSH
T18AE5190177E58875E4B2973149B5AA5816777D21AB338A4F32C17E8FFBF07819922332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-16_59ca646cb1f12af6f46794542a9d2600_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-16_59ca646cb1f12af6f46794542a9d2600_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_59ca646cb1f12af6f46794542a9d2600_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads