Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/05/2026, 14:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe
- Size 1.1MB
- Sample260524-rrve8aav2w
- SHA256 94a6780b317c40a4f2d18fb536200ebef7c5d81be879145d2527c08566edd945
- MD5 19a3f8f87da44427362f82da773fe32e
- SHA1 363d2c05154c778971ed3e5488339e0617ccd594
- SHA512 3374b2a001f5426578cbbf87b02c03178a0df4647aa34b727e2e39f28d937251e01c66267dca9d80121620706765f592c467aeb947c04830c51ceb728a5da116
- SSDEEP 24576:R5+t0pOdRUPjO7KX53RTh0tFda3d0kCIabjKoh9WZFTTx0D:KeODUrOO53RTqtiTCIabjKoh9WTTKD
- TLSH T11035390267409E71C46A01F738D693279EF57CA00A625397F384BF6D9F32A906BE3752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-24_19a3f8f87da44427362f82da773fe32e_amadey_darkgate_elex_mespinoza_rhadamanthys_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1096