Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/08/2026, 12:15
General
- Target 2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader.exe
- Size 50.3MB
- Sample260805-pe2bwsfl71
- SHA256 2b42d8913ac3f2f948129b62d7dfe0724e2d765878ef8a8cb89e732c5687cfba
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3948-0-0x0000000000400000-0x0000000005655000-memory.dmp
memory/3948-1-0x00000000073A0000-0x000000000740B000-memory.dmp
memory/3948-5-0x0000000005820000-0x0000000005821000-memory.dmp
memory/3948-6-0x0000000005830000-0x0000000005831000-memory.dmp
memory/3948-7-0x0000000005840000-0x0000000005841000-memory.dmp
memory/3948-8-0x0000000000400000-0x0000000005655000-memory.dmp