72043bbe765a6f3b96f575a19d99088262aeebe0f25fa319f73b041aa2d7ab8e

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/09/2026, 23:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-23_fe6f1f722a1dff1d6336892d2c4fb800_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Size 2.4MB
Sample260923-3qvkdagd97
SHA256 72043bbe765a6f3b96f575a19d99088262aeebe0f25fa319f73b041aa2d7ab8e
MD5 fe6f1f722a1dff1d6336892d2c4fb800
SHA1 aea138630f343ed01247f46a0f3d58c0a5843055
SHA512 aba5495c86140dba5e23e12a86fae0d4f9daa97662659153a8bb07a61ccc56ef80dc8a1489866832b39c2243288143e8e2fe765006641ffbec02ccbfd8a552cc
SSDEEP 49152:8d7fjgsKGx9S9lsQrnSKlNC2NkqiQjIQ5ITQWwXh:8d7fj8ZNb3Tj7
TLSH
T1E6B59D217B02C133EA930171896DAB7F487DBE60076281DBB2C42E7E79706E35739A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-23_fe6f1f722a1dff1d6336892d2c4fb800_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_fe6f1f722a1dff1d6336892d2c4fb800_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_fe6f1f722a1dff1d6336892d2c4fb800_amadey_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3864

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads