Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 12:49
Behavioral task
behavioral1
Sample
2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe
- Size 16.4MB
- Sample260916-p2d5waba53
- SHA256 a2b5ea55c9d6612083397a79c51a1593b8cc8d915525ea658497a6527b0cab71
- MD5 4addb05d4acc58431c24b23f50cbb8d4
- SHA1 4322ac6ca667d290fd7897bb22adc27e01247a1f
- SHA512 04bfbab1635b8f4ce6b8f8a5ccd1fcacd0628ed88589fef3ebf3155a9bdbe9ee8c8964cd1db200e9930d6a55283a046a2d0ea0dbac667bce3224fbcd2402409a
- SSDEEP 393216:WJJhllNUHGcgUVluK7aMIbUwF1VERmj2b:E16HvfVlu4nIY092b
- TLSH T1C607F100FAC300B1F8A7147146ABB22F5B28A5528718DDD7F58C5AC9EF23AF16D3175A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-16_4addb05d4acc58431c24b23f50cbb8d4_amadey_darkgate_elex_glassworm_karagany_luca-stealer_njr.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4680