Analysis
- max time kernel
149s - max time network
157s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 01:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe
- Size 2.4MB
- Sample260601-bwst7adv3j
- SHA256 9bb06e450bb7fcc9025444220511cd504f4ee9715a074935f47d01eb64cafc8b
- MD5 27e8f90bf2cd991c139d1a729eb9b9ed
- SHA1 ddac39a5eaf6b095f99b8b804d0d0ce2e8a4c77b
- SHA512 d6316309110b672e5387b4392872e06e47d79319488999a418fee8c4d8a6d2fc69f4b172993a0119b641457fade9650a5856df2c0628ff9268d4212c30a7fc72
- SSDEEP 49152:qhd95rbjFHItTuKqPc6TZHYSpfNo0fuldzjRQhwN31Z1tivh+sF/RyDIcQEDy:qN9Fo9oPc6tHYSpfNoEu3ehwN31IhhFH
- TLSH T1BDB57C2136D190F6C3722731955AA378F3AEBE305E36424756B13E3D6934492AF3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-01_27e8f90bf2cd991c139d1a729eb9b9ed_darkgate_elex_floxif_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:924