10f49174e35bec749170269e5188f71703ec39696973f6f0242f7fa7366d8d60

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-18_451191c4cc5cda0234adbb87d51d1df6_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 2.5MB
Sample260418-payefagz7x
SHA256 10f49174e35bec749170269e5188f71703ec39696973f6f0242f7fa7366d8d60
MD5 451191c4cc5cda0234adbb87d51d1df6
SHA1 cc3a2122ad8a687a857147e61f67da246acbde82
SHA512 d04e1654c964a977fdce18bb2a5535d86149c50bf92d3d14d72086362de38592bf30e94273b915c2e6cf75e6eb01f86a0e10e48fb09331e9f792714e860e1a9a
SSDEEP 24576:W7CWlTJissd7pB4qBLi5lKG6+baewsAjKSI8LUlFl5FpW7WUtLpwbtLpwwSz:CCWlIssZLi5lKr++ljqcY/mbtL2tL8
TLSH
T106C5D5136E6D4831C56FBE304D61EBDD51267D009A232E8B2ED57D8EFAB12C1792E132
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-18_451191c4cc5cda0234adbb87d51d1df6_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-18_451191c4cc5cda0234adbb87d51d1df6_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-18_451191c4cc5cda0234adbb87d51d1df6_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads