Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 02:44
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
- Size 2.8MB
- Sample260808-c779pabc58
- SHA256 853bfda00e05cfdb6ba886df365a924f060a84d2233ca08ac83f368468cea12c
- MD5 ca576df7cb2ee414612d96ace3294dfa
- SHA1 c55504e2d7dd58726d8a8c3392b8824eba78429f
- SHA512 6a68991cdcd4151bd8d4994d18bd24b68f727a54558741e640a538a5460e475d079c3b271b24e9b0022c5b50eb782c70d689c932901f3ffe28959c31a1c9e874
- SSDEEP 49152:28VNdlvh5pdZFVc2fOLZmEmFJQAImMXFEZ4GI19O55+v5VfDLo8tu2:3lv5bDc+Eh9O55+xVfDb
- TLSH T16BD5BF12BA41C031D6B241B2462CFB72ABADD5291F7280D3B3D45EBD25A05D2673EB1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_ca576df7cb2ee414612d96ace3294dfa_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4500