97c74cc148a5338de22ed4a441aaa4d39d34abef9a0821c55a90227bb82ba367

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 18:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-23_f16295a5d92cdfd99e837fcc72b17384_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Size 1.1MB
Sample260423-wvcf2adv2p
SHA256 97c74cc148a5338de22ed4a441aaa4d39d34abef9a0821c55a90227bb82ba367
MD5 f16295a5d92cdfd99e837fcc72b17384
SHA1 70210e94166eb28d590925b2339350537cf443e8
SHA512 915f269e77068466d9c01484074515f392754a7f4c5dae84c7774ce6b2828cee6a9deaf81faee6382f19964a2a0e1889a866eb4d17d62819ef6c161643971f8d
SSDEEP 12288:1iNIwbVX86avEF8JMkK7AwSfxL/2Dc3jDLLmt0LDQewsAjRoM2GAu1mt0LDwrepc:1oXVav9MkLaewsAj2M84pJkBp
TLSH
T1CF358C22FEB0C432E6BB08755EA5D7056839BE610F1056D7E3B87B5D8C312C1A73AB16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-23_f16295a5d92cdfd99e837fcc72b17384_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-23_f16295a5d92cdfd99e837fcc72b17384_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-23_f16295a5d92cdfd99e837fcc72b17384_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads