4df93f02b54daec53287f2b23472ef94e2fc7c35e727c6469e8519ab8e2fd902

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 21:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-22_12f20dc1c89c3361e323a973fa5208ff_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe
Size 2.4MB
Sample261024-z2fntact51
SHA256 4df93f02b54daec53287f2b23472ef94e2fc7c35e727c6469e8519ab8e2fd902
MD5 12f20dc1c89c3361e323a973fa5208ff
SHA1 60f0536568233933e98136862296f4f92168d86c
SHA512 610cefef5bbe6ad4b3037a9cb3109eac7992f54dc0ee29c279790f1db4e6403eb3e9d8d9b404c33442848346a6a3fc7b53a33455cfb8a049ba102434c6d38366
SSDEEP 49152:qaR8cA7GalrshcnF9ri2Xm1xz9BTs8DCAj:J8cA7Ga9sh95BThDz
TLSH
T153B5C06235538271E94142B2DF3FEB7A982D7D600B6980D7A3D81E1E0A31FD259372B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-22_12f20dc1c89c3361e323a973fa5208ff_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_12f20dc1c89c3361e323a973fa5208ff_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_12f20dc1c89c3361e323a973fa5208ff_amadey_darkgate_elex_luca-stealer_magniber_medusalocker_njrat_remcos.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads