5b4b492827e08eb1d30f6600ea746d9b475d1eea8c5d70b6e3f937d09c0f7c1d

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 05:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-26_5041f8caafb34c96c516f90640bea919_amadey_elex_glassworm_smoke-loader_stop.exe
Size 7.8MB
Sample260426-gc1zcaey21
SHA256 5b4b492827e08eb1d30f6600ea746d9b475d1eea8c5d70b6e3f937d09c0f7c1d
MD5 5041f8caafb34c96c516f90640bea919
SHA1 d2b0b8ec264ca367587027f63c99d2bd50de0e83
SHA512 fbac797c56783653dce04e351831f77f74a09276e68a1575d1ed3da3bbdd38fce216963a5f925f59ed323ae9a21708e372f172afe430fdaf4de1afdac77ee32e
SSDEEP 98304:O/csV8KedSLQOnIq1C1dMbBpCKS15fdHXdPkGeRJsv6tWKFdu9C2h:mcQtnIq1C/MCHfttPkJsv6tWKFdu9C
TLSH
T1A1868C81FBCBC0F2DE9715B1006B932E52369A5647245AD7E65C3F27AD313C2BC36289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-26_5041f8caafb34c96c516f90640bea919_amadey_elex_glassworm_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-26_5041f8caafb34c96c516f90640bea919_amadey_elex_glassworm_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-26_5041f8caafb34c96c516f90640bea919_amadey_elex_glassworm_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads