Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 22:28
Behavioral task
behavioral1
Sample
2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe
- Size 1.1MB
- Sample261027-2dvtyavy5j
- SHA256 f4117b3df37d57676005978fc3f9e32e4510fbb36ba72b2ec277cd8607c6195e
- MD5 efd8030c0dfe39e2f57ca45aac3bd513
- SHA1 a66682bcf9afa397c506a74fc4660f63630cef76
- SHA512 cdfbb92c8fab8f130a93172788a8a63409276dbd9c8deef2fae37d52382087bfaeb38a6acfd6b87978558d213016074e0fed32f397c1cf229da68f9c6effe4da
- SSDEEP 24576:QGcuc9ILAxl2fQtAB1x1Kvnjfb9jOzd3KtfZpqzQCOyzLO5k:VG2T4ts1x1UB+9KtHa7
- TLSH T1F6455C417BE64066FAB22D702AF2A616CE7B7DD21835C54F529C854F0EB3A809D39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-27_efd8030c0dfe39e2f57ca45aac3bd513_amadey_darkgate_elex_glassworm_hacktools_luca-stealer_mi.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1872