Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/09/2026, 00:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe
- Size 2.9MB
- Sample260907-bas8tstwev
- SHA256 cae9320424641c64dbc215b09de28d6e0ff68ce0f37e83c02ed494f627439b59
- MD5 72ae2b1b41a19f5b5a41907e6c0fd081
- SHA1 7de8691c9ecab01a8be41b2ef58353638131fbc7
- SHA512 755ce77bcaa6b4b15bb360f269ce299ea1b1d1cfde718be6d0379e30c6857fc2b779b01dd3dac12f9e9258f53757d8b8f89313a9d9b0d0ce5fef27325f10aa72
- SSDEEP 49152:YZnxloyGKqlUh2OLPWsNSBOEOyMeIvY8baWCNDokd6z/WAl7:Y56c5TWsNSxO+Iv9ajNDbIz
- TLSH T15BE57C01A6619035E87301B1ADBDB54F996DBE310B7884CB63C8383E9BB59D1BB77213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-06_72ae2b1b41a19f5b5a41907e6c0fd081_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3116