Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/07/2026, 18:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe
- Size 3.6MB
- Sample260714-w9s3bsbs8l
- SHA256 a1663103d16e410933c311f286506baa46f805cc2dc8fe21139cbd3a43b1fe80
- MD5 b1c1b4de8a3255ea98ef5cba0cced91a
- SHA1 576409eab87c4fc5bc7f5f7d918d322ff48e2672
- SHA512 1b034370b1353e6d2905328b507c5d20307f5166e7a5fac658e4f01ee0b6782e5e2d58547d8a1e36babc81e4a6a9d2247952971827a511cf0033e2116bb0a099
- SSDEEP 49152:BK0DZT88fIf7wnNTBfF90g7mM+M6RkMkIM7I067ScY/B8xmN3Aek03noj45wlDT1:BK58oM+M6RkMkIM7AceUJF3noxDgK
- TLSH T15C067D02B7A198B1D46247304961FAA8527BBD60D9338E0F72D57D8EFFB12C15D26B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-14_b1c1b4de8a3255ea98ef5cba0cced91a_amadey_darkgate_elex_glassworm_icedid_karagany_luca-stea.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3128