00e7a93b36e21dc3d2ea9f1fe2c2bdd4b03b5ef962ede0e522f3b20c9a15ad31

Analysis

max time kernel
149s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 15:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-15_62335e139aa47d3ac4e54ac0471661e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 3.5MB
Sample260415-spknnsbw2n
SHA256 00e7a93b36e21dc3d2ea9f1fe2c2bdd4b03b5ef962ede0e522f3b20c9a15ad31
MD5 62335e139aa47d3ac4e54ac0471661e4
SHA1 e1646eb58aabf74ab5b6ef707e3e30f4ed4d0c43
SHA512 8745344c259c7ba577b9fc7bc5c9d4ae76fc691f74b9c1d7e68f38db8664d8d46f2d74fe6ed78c973cf8e9f1d5b124f36009c6a16b04b97f8d00c5ce8b990f4c
SSDEEP 49152:LhoJdXN0BMOwLloBrugxljaqnstLet3Ly4cY/7ZqhaK6zbfqdl9:LSJdXN0B7+sYqnstLEeGx
TLSH
T1AA06391166F14531E076E6305970A74D90767E20DE32CA4FF280FD9EBAB96E26932733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-15_62335e139aa47d3ac4e54ac0471661e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-15_62335e139aa47d3ac4e54ac0471661e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_62335e139aa47d3ac4e54ac0471661e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads