Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/05/2026, 01:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe
- Size 2.4MB
- Sample260505-cdfbtaax2n
- SHA256 0046080d56ea8deab9f2dbb4344145a4f6af3255e3cb24ca5818cb1a010b7b13
- MD5 20514d32f0236e5ba1e25e962ab099ba
- SHA1 c8144725c75e75370bc27ce8997a8be1a4ee7098
- SHA512 5ba22a27eea1fbbcfa1499f340fb5a26e62f8c4b8199fcf7db8ea430d7190f8e9dc436d9d55dbffed4d9d2088ce87a7b768a6b16f262e346ae641f27f8a2a263
- SSDEEP 49152:uhdv5rbjFH1kMtTuKqPc6TZHYSpfNo0fuldzuRQhwN31Z1tivh+sF/RyDIcQEDT:u/9FVkM9oPc6tHYSpfNoEuCehwN31IhC
- TLSH T158B57C2136D090F6C3722731955AA378F3BABD305E36424756B13E3D6934492AF38B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-05_20514d32f0236e5ba1e25e962ab099ba_darkgate_elex_floxif_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2024