686b083555d160d84a76ba734453364e45e6cb8163df0cc76992a0daf1d211ea

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 18:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop.exe
Size 1.9MB
Sample260825-w7msjadn2x
SHA256 686b083555d160d84a76ba734453364e45e6cb8163df0cc76992a0daf1d211ea
MD5 15524695c55a0439f119c8740ae476fd
SHA1 b95484f78078e72b5c223b02a44c949dde455fc4
SHA512 5f83909a8418b6088c3385e4fff48f1b6ce7cb3a6556f9992ebfcd31d0de41be43f543633f2a95a4e5980f5dd7c9ee71643a0c0bc3a13553291ee25ef4f68ada
SSDEEP 12288:iaYeiveC8omNZHsyClgmw6zxV7NDEpUE9QDV9U11SVqLcuzkB/X/2xlsxjbN3FFx:mw/rhAucuzKPgssStPUvgB
TLSH
T126951803E6E5C029F0B32A709D798BA45A77BD60AD35857BE2C33B5D1E70AC39521327
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4580

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4580-0-0x0000000000400000-0x000000000048E000-memory.dmp

Download