Overview

overview

3

Static

static

3

2026-11-01...er.exe

windows10-2004-x64

3

2026-11-01...er.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 13:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-01_9d67c43f0aca3aeb1904fa4861874f0b_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
  • Size 5.8MB
  • Sample261102-qtte9sat8x
  • SHA256 3040b2a23ef0c6277253835e691b1e2122dcde45537b36a3fa4855f4436542d1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-01_9d67c43f0aca3aeb1904fa4861874f0b_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-01_9d67c43f0aca3aeb1904fa4861874f0b_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2364

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mob_db.txt
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_tables_test\mob_db.txt
        • Size 718B
        • SHA256 be7d8de38fd6b1f8beea971b49c73db2ac603b377a81b6b9bfeade06c67c3b4d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_accounts-debug.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_accounts-debug.toml
        • Size 208B
        • SHA256 09a8101d25a2b6fadf5257fa09ba8db010946d0d5d71e2e2d26d0a370180d0cc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        accounts.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_accounts\profiles\accounts.toml
        • Size 462B
        • SHA256 66f7b62475905ad8ad03eb187b1cc74c35326ba509472cbe11e17a122982a514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Nilinho.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_accounts\profiles\character\Nilinho.toml
        • Size 137B
        • SHA256 4329543ee3630da585b9222a88639a9665aa4b00af3b3fe53ce982354e871084
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ZeZinho Rapainzz.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_accounts\profiles\character\ZeZinho Rapainzz.toml
        • Size 76B
        • SHA256 d1bf53980d8ca0a48dba1df8860d18067db76444eae06d866232dcfda73d417f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Nilinho.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_accounts\profiles\profile\Nilinho.toml
        • Size 262B
        • SHA256 d355e0d8c025f186474d9658321c4153275fa7f8d76c6a4dd9898ca7b13f8261
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_config.txt
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_config.txt
        • Size 4KB
        • SHA256 235f8b683334de961468c1e4a16a2960fea335eae10fe3bbd37b6c39efbd2aff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        skill_db.txt
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_efst\db\re\skill_db.txt
        • Size 1KB
        • SHA256 12ca025159ce177a818ddba2c0feb38eca68e6607ec4e4d38ac80537c1f48334
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        status.yml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_efst\db\re\status.yml
        • Size 90B
        • SHA256 1b68291d5460e2eb811bc21e7c877599a84eda05948f7f3ec3be5cbe902a3989
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_interval0.yml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_interval0.yml
        • Size 98B
        • SHA256 c2431406f3859386876dd8451d37257afd32d295bb15c7185a2881f912dc550e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_mob_db4.yml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db4.yml
        • Size 132B
        • SHA256 2241880740f3441bc4db18dad727853ae193cc8e466d84ce8172af612dc6d3ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_mob_db5.yml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_mob_db5.yml
        • Size 128B
        • SHA256 9a93da64b764ac0eb7b6f5928a9cf25b1470dd0bc9f76ec8fe20c64e3d54fe00
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        maxyclaude_test_rules.txt
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_rules.txt
        • Size 4KB
        • SHA256 c2ae971ca3e262fe413247a9b43ceb2231dc91b34b628b69d6c1ca172d2362d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        accounts.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_storage\profiles\accounts.toml
        • Size 638B
        • SHA256 5b2a408ff54aa988b7ba9b6f9c489fc0f8aad8ed915e2b405977a7408c55edbb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        accounts.toml.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_storage\profiles\accounts.toml.tmp
        • Size 663B
        • SHA256 0dfa5cae43f2d05906d78c67bd233a001bf094e088a1b73911e0de04dbd4df65
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        default.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_storage\profiles\default.toml
        • Size 30B
        • SHA256 18d1bc29f038702fe03f2a74cb40eb5a1a98ae797ec2cc0119d0d0da18f7f1f4
        • MD5 SHA1 SHA512
        Submit Download

        Monk farm.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_storage\profiles\profile\Monk farm.toml
        • Size 87B
        • SHA256 e9f171d63b9ac3b232ef4b4fd09ed5f264a9f71fd05ad12f4d889fba1eb085e7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Sniper.toml
        • Path C:\Users\Admin\AppData\Local\Temp\maxyclaude_test_storage\profiles\profile\Sniper.toml
        • Size 24B
        • SHA256 5dddd9d76b2a7d6306d68a0050b6daa2cfae435c740d2f3de0d7fcd8d8ba5145
        • MD5 SHA1 SHA512
        Submit Download