Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 01:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
- Size 12.4MB
- Sample260730-bfxs7saq2w
- SHA256 048e52c9d0fbcdb87f07536470cac193213ec5febc91a4828e69ac3f83c38759
- MD5 e73e4d92b75424516d9becc0e1fe3fe6
- SHA1 4fc7224be51611ab0a32a24b4dd9e6100e06b32a
- SHA512 bd7ebb193707053c542035ab4c6f3d4e77511bb274e1d765f495925ce0b62f1fb195e501c90b54b8b4cebffbe04110a3c7608c466b27b40b088e54f80e939151
- SSDEEP 98304:nAUUK5KTrX128BoSwaDHXtzjTjzjTjzjB:nAUlaXLzwYdzjTjzjTjzjB
- TLSH T141D64E1316A7A907D11063BD4255E3ED8A5B2BC4F6A783B756E02C777904EA31E3F8E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_e73e4d92b75424516d9becc0e1fe3fe6_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3404