586ffef8a89b01e831e974ed2d03b5d938ae2d3d0669181fcbc8f7c3e5ea1f0c

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-27_acf30eb7c1270b7a47ebfd5af130460f_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar.exe
Size 3.5MB
Sample260727-rnp2bsfr41
SHA256 586ffef8a89b01e831e974ed2d03b5d938ae2d3d0669181fcbc8f7c3e5ea1f0c
MD5 acf30eb7c1270b7a47ebfd5af130460f
SHA1 0e7fcf875c68b5dd79b54f7bc6aed12f2eb5bda0
SHA512 7e65c8dd21da9bbb92b0dca01466b6cf2c2ac51a1f5f187fd95f904f789afc4a8356c6d3e6abb8a4e484a90c204c0728deae706a28f417ee51db178501047d9d
SSDEEP 49152:BK0DZT88fIfi35DMnCIjtAydIgjdsk9WnOoqJtb2ISPji0AjvpYqXqatglE:BK5N55sgjOk9WOo1jo76wn
TLSH
T1B9F54B12F66487F6D4738075C9D2A7AAEA7138510B30E7CB5389E32C6E33AD19937721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-27_acf30eb7c1270b7a47ebfd5af130460f_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-27_acf30eb7c1270b7a47ebfd5af130460f_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-27_acf30eb7c1270b7a47ebfd5af130460f_amadey_darkgate_elex_glassworm_rhadamanthys_stop_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads