d6d8e916b2a14427a5d1f11d45f2ffaece84f28502e5d3f028a53a4f998d7db7

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 01:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-28_4018f68b3f88a1eb985f42c4b35cb2ca_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe
Size 457KB
Sample260729-bspclattav
SHA256 d6d8e916b2a14427a5d1f11d45f2ffaece84f28502e5d3f028a53a4f998d7db7
MD5 4018f68b3f88a1eb985f42c4b35cb2ca
SHA1 68c13e7d73b2e2d41f21f09867b79ff35ec91136
SHA512 3e53ba503f452cc41cb560948bc1ca2888bd3873dbe1a6841a7aa816886d9c171efa6e55c38e838bf0b14b49f306e7090aefc7cf17f864d0d655c2be40043e4e
SSDEEP 12288:6jItwI/T1YIR3Q7jM9/T9mmu/vVC/kMofN5kAi1NfXE2XERKVW1ro+kYV28fX2dg:6ARYIR3KjMJThZs2yyzAWLN3pqsakuWY
TLSH
T1E3A49FC1B6D58021D8369B720466B7B2003D7DE07B1077CF93D5AABEED255C30A37A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-28_4018f68b3f88a1eb985f42c4b35cb2ca_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-28_4018f68b3f88a1eb985f42c4b35cb2ca_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-28_4018f68b3f88a1eb985f42c4b35cb2ca_amadey_darkgate_elex_hawkeye_luca-stealer_njrat_remcos_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads