45f186806d45756122998864eebe58c0ee3e1e63103c6776bb5b70e2cd8c0e78

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/04/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-25_82da0ec1962bfa8eefc29534a273037e_amadey_darkgate_elex_emotet_gcleaner_smoke-loader_stop.exe
Size 468KB
Sample260425-etwd3se16w
SHA256 45f186806d45756122998864eebe58c0ee3e1e63103c6776bb5b70e2cd8c0e78
MD5 82da0ec1962bfa8eefc29534a273037e
SHA1 87c197f0891a0f5f4d0122d9a6526c7d80817f2b
SHA512 f5be894a3b04d0c2e92d94e0c64dee1f4f856f1cf163cdc5cbea70eb4bd9afeddc53d16b3d3d557973f8fd4cb93a7a595eb092bd705b8461a68262ff393c7913
SSDEEP 6144:UZOd5NGCk+E/F5HMinY2gzoEfyIiSW/jmBbK0b4ynjjH8IcoFx/rJcK4t:Ldefx/nHqoVjmBG0x4t
TLSH
T18EA42812B7F9B435F1F31B719D3582A45E76BC20AD39C50F33882A0D9E71A91CA29763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-25_82da0ec1962bfa8eefc29534a273037e_amadey_darkgate_elex_emotet_gcleaner_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-25_82da0ec1962bfa8eefc29534a273037e_amadey_darkgate_elex_emotet_gcleaner_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-25_82da0ec1962bfa8eefc29534a273037e_amadey_darkgate_elex_emotet_gcleaner_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads