Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 17:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
- Size 1.5MB
- Sample260709-wfhphae13j
- SHA256 8533cbd5b1689ac5501ec11464078699b29f51611e983c6d2dedfd09792c3c7f
- MD5 29857e8d751730447dc5286e2b786876
- SHA1 ebab7da6c406f315e64369c0004b2fb3a560acd0
- SHA512 4140b8a3f306b59dfc53e7ce79b392ae0d9591d5e110faff8a69ad2ecce1ed362fb33b5f0889879310e9b2ef223c48ab298e259757dab249f08de5c6c9bd08e0
- SSDEEP 12288:VfPNxqXqvE3nW5Lo/4mt0LDiAtiu/6SsfrR:h1VQAtigefrR
- TLSH T1DB758C31FE74D036C6BF0DB21B35D716187D7A204B911AC3E3E89A9E59202D26376E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-09_29857e8d751730447dc5286e2b786876_amadey_darkgate_elex_glassworm_hawkeye_maze_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6416