14c1410ce8c591ab95a91cb90adc671c91f7300bfc7fae2cfc7976ce0f2c1e85

Analysis

max time kernel
148s
max time network
110s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 03:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-14_b10ee0ccab9a029ef645ac62b3fadde8_amadey_darkgate_elex_hijackloader_smoke-loader.exe
Size 584KB
Sample260714-drc92sft8x
SHA256 14c1410ce8c591ab95a91cb90adc671c91f7300bfc7fae2cfc7976ce0f2c1e85
MD5 b10ee0ccab9a029ef645ac62b3fadde8
SHA1 23f1a5d89321c6a10b11ac607033cb07b41cba51
SHA512 ac791f5e381c774a60671b6c0a7299df479f31ff8ced4bcc7630cfee3f9262f7ab36991707b8b468b3e896fdcdd2583ab588b94f9420a2a2340061b2d4387acd
SSDEEP 12288:f8pnn4UYHEULuKSLX3mG8BrQ5Q5JCstTEN:U4Zt/SLX3cBrQ50JfTEN
TLSH
T1E8D47C505E71913DD9A240B3ABAD93276027FA72271541C7B3801DAEADB09D3BE38737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-14_b10ee0ccab9a029ef645ac62b3fadde8_amadey_darkgate_elex_hijackloader_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-14_b10ee0ccab9a029ef645ac62b3fadde8_amadey_darkgate_elex_hijackloader_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_b10ee0ccab9a029ef645ac62b3fadde8_amadey_darkgate_elex_hijackloader_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/632-0-0x0000000000970000-0x0000000000A02000-memory.dmp

Download