Analysis
- max time kernel
150s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 02:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
- Size 5.0MB
- Sample261023-cvsngahs51
- SHA256 4488eae0b68eb91e9815d70919597b67fca2b1118930ad4d958f0853bf9732b1
- MD5 f43222c3afda52643d69f144e69991c4
- SHA1 e10cb5ced1afef13a6fdcd90f9f56053ca99d5a8
- SHA512 13181fe9e35a02caa3595ab6a2a3de86b788063ffdd3c4c820ea0b2d6942674dd6b0c190fbe4b9da80edf0ca8e6ad486519f63a4a206c7a92c9d8f19b12d062e
- SSDEEP 98304:1Hr+HzfnGCzTJ50E1Q8TdlZ2Z/Xpu4OiZrq1DfPHNADtV6v+dLufAM2Mi1vD/Mi:lr+Kml5dlZ2y4O7NADtV6v+dLLxMiBMi
- TLSH T1F436AE11FE4E84B5C627093189F9F274B27EFEA41A2703671144B72DBFBA2834E2D516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-22_f43222c3afda52643d69f144e69991c4_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4600