Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 15:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe
- Size 2.4MB
- Sample260523-tab9esct2n
- SHA256 2dd37b50623f52b3f32afdd3a687862790410cd2505f425b8b94ee7f19bf450a
- MD5 36ee328f22c766f1436fb6a2a963590c
- SHA1 736b1fd645cdaf97dc6ca52f7087971f266dce79
- SHA512 f7961162a9fdcb3151f131b212bbf79d09f74d9bc0666328385200ea4b8a89625a84e62a9ff8869b35dd48bf6ac60c853c041c07e1396ef96ecc13c22271a98a
- SSDEEP 49152:BE2MfALfU2mUi6AjW/MUSdGRf3/1eW4SkZP4sz9MbB:BajxAZZfkZcB
- TLSH T1AAB54A16B9788672C0B28079C992B75DFB7134518B238ECB12449F9CBFA36D19E35336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-23_36ee328f22c766f1436fb6a2a963590c_amadey_elex_glassworm_mespinoza.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5148