83ec86ec5d9985aeb9fcc7e175c38e5b4ffa21b4f577efe3508b609a22bdfaeb

Analysis

max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 04:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-01_b86b6a02b44d034c49230da971a387d5_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
Size 1.4MB
Sample261002-fffl5swcnc
SHA256 83ec86ec5d9985aeb9fcc7e175c38e5b4ffa21b4f577efe3508b609a22bdfaeb
MD5 b86b6a02b44d034c49230da971a387d5
SHA1 1682ee79f9ef3ff00dcd3c2c26e14eb3d3ec5c9b
SHA512 eabeff17d1fbe9867d8e4aad87e30fbfd87586f860eb772b11bb3fa96ead0b42f944bf3ae76b93728600ca1ebf45c434a89528811ea9abc32bfd7730305d0a9c
SSDEEP 24576:oz5mtteGDlSmoQqsaOkpcthTcMZgA3eM4f:oz0JSrtWthT1ZtOpf
TLSH
T1B6654AD023C7C466D845123A86ECEE6AC828AFF10BA741CB56F43BD91D716DE2B31D16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-01_b86b6a02b44d034c49230da971a387d5_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_b86b6a02b44d034c49230da971a387d5_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_b86b6a02b44d034c49230da971a387d5_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads