e888980c080b031f7468cf9f914747a8e7d5d1f2c4382944a14e063b76986976

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/05/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-18_b6fc439d935ec5c2b8e58a9abcf58689_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
Size 2.6MB
Sample260518-vtzphaas7x
SHA256 e888980c080b031f7468cf9f914747a8e7d5d1f2c4382944a14e063b76986976
MD5 b6fc439d935ec5c2b8e58a9abcf58689
SHA1 6045628bbe01c55289ca4efb2923cf8dd06989cc
SHA512 7c683d50c746d6335062bdb9ad5b672b02389150b1f7e383dc3c0fa449440037321471374f621fffad7f6f1451c9842228d2c3dbb52a36270f564a3b788a95af
SSDEEP 12288:2wMcMmMQBmed1hr61DUtLpm1EwtLpm1EGjcuzkB/X/2xlsxjbN3FFcSRPPbYNtGd:D77WUtLpwbtLpwpjcuzKPgssStPUvgb
TLSH
T1F7C5820DEEA84D19EDAE5E309965937CF5227C5F7E2DB14A2E80321AD973FC06521323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-18_b6fc439d935ec5c2b8e58a9abcf58689_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-18_b6fc439d935ec5c2b8e58a9abcf58689_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-18_b6fc439d935ec5c2b8e58a9abcf58689_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads