eaeb811a16ed6377f37a62c396a01648e804c72127d7b2aee3ef0da1c45f57a5

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 03:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-27_860fed3c8b755919b8fe92e34c4ee1ff_darkgate_elex_glassworm_icedid_lumma-stealer_remcos_rhad.exe
Size 11.2MB
Sample260928-d6kyfavyew
SHA256 eaeb811a16ed6377f37a62c396a01648e804c72127d7b2aee3ef0da1c45f57a5
MD5 860fed3c8b755919b8fe92e34c4ee1ff
SHA1 101cf581995219c3bb180929be0ca016bd97fc64
SHA512 0ad0caf4105314cf53390aee47897ccd9055ddad3858d5a02e154fc5d165eafc39986925bc98216649674c462b613b228948fad2354c0066335beff3ba6236ff
SSDEEP 196608:c8SMWnRxw/jzRmMgdrqNuougXEpAl6Fzll6FQZl6FesLn2E49:L/WnRxw/PRJgdrqNuouNDxJGn2B9
TLSH
T1AAC65A01A7FA81E4F6BB3B70AD75725A0A7EBD91AB34C7DF62542D0D09306E09974323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-27_860fed3c8b755919b8fe92e34c4ee1ff_darkgate_elex_glassworm_icedid_lumma-stealer_remcos_rhad.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-27_860fed3c8b755919b8fe92e34c4ee1ff_darkgate_elex_glassworm_icedid_lumma-stealer_remcos_rhad.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-27_860fed3c8b755919b8fe92e34c4ee1ff_darkgate_elex_glassworm_icedid_lumma-stealer_remcos_rhad.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4784-0-0x0000000000400000-0x0000000000DB3000-memory.dmp

Download