Overview

overview

3

Static

static

3

2026-11-01...er.exe

windows10-2004-x64

3

2026-11-01...er.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 04:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-01_e9cdc466452564ee82cb377a307c33f1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
  • Size 2.2MB
  • Sample261102-e8f8pshs2j
  • SHA256 78eb65ee9c32946a2beb91232a14b89301440ebe6623b429ad306377f2d158df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-01_e9cdc466452564ee82cb377a307c33f1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-01_e9cdc466452564ee82cb377a307c33f1_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1560

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        big.bin
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_dl_16\big.bin
        • Size 292KB
        • SHA256 3cdc92c3d725c404c8cfaa26d17a7ff0420dac1c5fc5a837c8d819f07a9ee698
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        flat.png
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_dl_17\flat.png
        • Size 97KB
        • SHA256 b4b76eea3be90f9c8fd1be40b57c8369a44586071049a3cb7f3a4e993d10a751
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        rnd.bin
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_dl_17\rnd.bin
        • Size 97KB
        • SHA256 c2b16bdd549a84d2e8df69209b3e88789c1460e512d44a4de31ad68916ae27e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        same.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_dl_18\same.txt
        • Size 9B
        • SHA256 de1ea2c5d9b528bee2bc664b3137507f4b9c935c1e0b8ffbdcd97c8f012ec7d2
        • MD5 SHA1 SHA512
        Submit Download

        srcfile.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_dl_32\srcfile.txt
        • Size 14B
        • SHA256 754c339c55052119f7539e5d845e15ba28d5f3766da8fb0c56cd7387c79714bc
        • MD5 SHA1 SHA512
        Submit Download

        dest.bin
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_20\incoming\dest.bin
        • Size 195KB
        • SHA256 38b2f7cf459e18e9f488b5164cd553ba6c0dc286df97c0121e319ca601730362
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        twin_remote.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_21\twin_remote.txt
        • Size 4B
        • SHA256 98571be241c22ecb15710e8f851302504e3d9b0924c40ae556d184caf8d62c14
        • MD5 SHA1 SHA512
        Submit Download

        incoming.bin.download
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_22\incoming.bin.download
        • Size 25.0MB
        • SHA256 257bd20284607c022f7f377a9c1ded966b475e40e18242e2ca720c5fe7f5395b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        lockcheck.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_31\lockcheck.txt
        • Size 17B
        • SHA256 f14bd549ad1fd8e2bd1b598e5c77a924f81fcb9c46d374d9ad5f7df875d7e171
        • MD5 SHA1 SHA512
        Submit Download

        emptybase.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_33\emptybase.txt
        • Size 10B
        • SHA256 beef8e912ebf345158ecb083f9ec2b2d4cf1b88eb0b06e9c362eac59e9819ac4
        • MD5 SHA1 SHA512
        Submit Download

        solo.txt
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_34\solo.txt
        • Size 4B
        • SHA256 d4008456cd59ffd7cd7dbe30651823fec911d6c21821d1a53b9d0663a7a4c6e7
        • MD5 SHA1 SHA512
        Submit Download

        solo.txt.digest
        • Path C:\Users\Admin\AppData\Local\Temp\rfs_home_34\solo.txt.digest
        • Size 23B
        • SHA256 fcaedfccd625bd8686159d803eea405329710a363d79931079a91a0710ddc296
        • MD5 SHA1 SHA512
        Submit Download