Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 12:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe
- Size 16.0MB
- Sample261030-pbptpayy4p
- SHA256 f1f664ddf345d13bfdb92013eabe7a528a86acadecafe77e611b9f77eb12b70a
- MD5 fe07ff2f10c76f7a0c611f877c9eff4b
- SHA1 92cdf03c5136596e58503109d50c7aaa812a83ba
- SHA512 cc917c8a0d8685789f0c85ea9f23aef26b0d3535c9bc6db03e76fe3e8e2d8c97ef59bf47e89f6dc776fced86942756d6f64ebdcf2a54321b43daa4c6bac05403
- SSDEEP 196608:q1mouyKFT9W7uF1v7nIg8hqRdLnVA3qCYHeBzBVBd8ij8MOVO9bz:cBBKF9/kh8LqdX8M99
- TLSH T13FF69E51B38681F5D98213B04C6CAB7E132CAD740B655ACBF5D43DAC2E762D31E3292B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-30_fe07ff2f10c76f7a0c611f877c9eff4b_amadey_darkgate_elex_glassworm.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5936