Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 15:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
- Size 1.8MB
- Sample260712-tdxpjaew8v
- SHA256 14948f93e98cdf4d474e0ad561f2255382e0f3bac0d1468e656cc145e29169df
- MD5 daa007ccf7400cb852d98f8b4f9bdf8e
- SHA1 1eeb21d83415b172b7b0203c47299d47b5b6f065
- SHA512 be013cdc031cc3f40f421ee7b30dd16da07c70a7c2ea92b6335300e5955fa7d3b918c2ac13ac0c2e4ebd2c4c96e3cc5a5d5971a7641fd27d179a7c4e4052d467
- SSDEEP 49152:D10PISv6BhEwtotaN90JhmXx5Unq8DBOtDmg27RnWGj:DWP6YaL0JhmXx6DBOtD527BWG
- TLSH T1A385BF23B543D036ED81017085BECFAA856EAA344B2514EB63D0796DB9F70E11A35B3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_daa007ccf7400cb852d98f8b4f9bdf8e_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3380