8bb33b6dcc8b23731935dab00d7b736ce3def28eb72388693e2d84ea3f37a33c

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-06_242e2f5516be012084d94ac1efd9f29b_darkgate_elex_mafia_magniber.exe
Size 9.7MB
Sample260807-bc51eadp8s
SHA256 8bb33b6dcc8b23731935dab00d7b736ce3def28eb72388693e2d84ea3f37a33c
MD5 242e2f5516be012084d94ac1efd9f29b
SHA1 b3e861a1aa2aa4ac333c7bf278d9adf6defc74b5
SHA512 a1418ed64088d0d137fd36b754580278f858b88a4631b2a26cc133d0d3a0d15965f433abf71bebe88c06cf4639eadc01c8651fa6ead1383daa2646e149a7b41c
SSDEEP 196608:Oh+htAyg93+b+cZmqpMYBBXHeftPl3rXyB0DQC2o4k++:3g9350FPefFluB0z2o40
TLSH
T1B7A6233076524179D5B38276AB3E1B3B686DA8601B7181CBE3CA4E1D0D719F38A3537B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-06_242e2f5516be012084d94ac1efd9f29b_darkgate_elex_mafia_magniber.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2968	2026-08-06_242e2f5516be012084d94ac1efd9f29b_darkgate_elex_mafia_magniber.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_242e2f5516be012084d94ac1efd9f29b_darkgate_elex_mafia_magniber.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_242e2f5516be012084d94ac1efd9f29b_darkgate_elex_mafia_magniber.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads