bcee7eec743d7f7e763ac7e3034fa99423d32fb0c2643ec32702685eec1a0b40

Analysis

max time kernel
149s
max time network
126s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 13:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-11_406281ea7e95bfc14e3be3c0e43509a8_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 3.3MB
Sample260511-qq82jset3p
SHA256 bcee7eec743d7f7e763ac7e3034fa99423d32fb0c2643ec32702685eec1a0b40
MD5 406281ea7e95bfc14e3be3c0e43509a8
SHA1 5171ada71471a2c03f9c582d23b6e4225d7af21c
SHA512 5ae1fce9024666bb67220b5a443f87466019a2227f9bfc8170d45bed3268bed42f72e4a79496f51ffe1b73b2cdeb11861bd760fed867cebf997737e55b5db692
SSDEEP 98304:erOO53EIabjKoh9W5p6JdXN0B7+sPhv7StK:mD53HpjvUK
TLSH
T151F5E6032E9C4435E0BF3D715DA5C3D945657C608A32AA4B6EC03E9DEBB15C0BA6E732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-11_406281ea7e95bfc14e3be3c0e43509a8_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-11_406281ea7e95bfc14e3be3c0e43509a8_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-11_406281ea7e95bfc14e3be3c0e43509a8_amadey_coinminer_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads