Analysis
- max time kernel
149s - max time network
101s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 15:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe
- Size 10.9MB
- Sample260421-sve1dact31
- SHA256 d7d8fa73db70064465515cb5b136a0347db630472c16e2c4e3b07655ddccbb37
- MD5 ffe031d6a92b325c00439488c6a880d8
- SHA1 1dcbbbe60d7d49e43be3b64a044a65c3caf39c74
- SHA512 5ce4ba7d09507a3344fd0cfcd41af253e94618057fdc0c846a0445f7c4ed0561a9970c1c361eeff79aec816f9f60a4225bdcf5bcab4b5f16c07ec1ed27aa4f92
- SSDEEP 98304:81FMMm/W2qqKn6MNTt6bm9N9P9Gyi0BdcDu1fZSo4SUvnJbOhrjKoSSL+vJlupDw:8HE/2HPf6q7x9GyiCkj8DSSqvJ2DZN4
- TLSH T136B65A41FB8350F5D94B1870302AB73FDB355909832CCAE3CBE45E61E86A7D2693A64D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-21_ffe031d6a92b325c00439488c6a880d8_akira_amadey_blankgrabber_darkgate_elex_glassworm_luca-stealer_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4100