Analysis
- max time kernel
149s - max time network
154s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/05/2026, 13:03
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
- Size 2.4MB
- Sample260506-qagmcsbt8v
- SHA256 f82d9253be0d5857b15b6d41cbb245f38b9df8945e6c60221de9c642f779cc59
- MD5 1cf7d510d4a5a35f188f44392b76a71f
- SHA1 c70450644fcd69132caf209d4ccd44526c81aa33
- SHA512 bb551f93ef6439a4b4d6388e9d884afec2d57f2cd2bfbf214131765b7aaa070357bc96593db3a2fa84e0559ad6d2d0d298c30d86bb6ba3ff5ac13233b4ebdcaa
- SSDEEP 49152:EJ7uti7hgc7MGis0W+JbcttuBH4PpBRlGfYEcAE2fs9v:EJatilgc7b0PJbcs8BRlkYEy
- TLSH T1A6C57B03BA624C61F4CE20379BA6073B4DB45D23D31ECADF87C179A548605F16E3AE96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-06_1cf7d510d4a5a35f188f44392b76a71f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5520