Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 00:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe
- Size 4.3MB
- Sample260720-am26tscv4y
- SHA256 7fa6d5db1d027213b5c05728c6e0d05f53bcc452b0753b6c78498aa0d9bae3ca
- MD5 fb937f1ad81cfbe059cc6bec5c73f680
- SHA1 f16af1cb5c4f9346f763914bff55c9a85ea0af34
- SHA512 7b58edca11e5aebfe1bf40ec75b2bfbb69f948ff2a99e62e525ed3d3c5a74d95c6a1e435dc7d96422d335f17100a29261125351e0aa45aba8e5420d932d4aec5
- SSDEEP 98304:XvgpWFmb8kIZp2O3tdylyPOmNEz2iYMMSMMa:IpWFmIkSpRtdyldBu
- TLSH T133263A27FB19C066F05682395E2EE632983D7978EA855057F3C0AF1FB1B56C0660A70F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-19_fb937f1ad81cfbe059cc6bec5c73f680_darkgate_elex_gazer_glassworm_helldown.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5488