c603aef1d3a7a9648fbdaac6626f561019ccd818e7bae3f34d232d0118010eb6

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-23_423a6163b3b5b303579b2843622ec6a0_amadey_cloudeye_darkgate_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Size 3.3MB
Sample260523-tt6mdads2l
SHA256 c603aef1d3a7a9648fbdaac6626f561019ccd818e7bae3f34d232d0118010eb6
MD5 423a6163b3b5b303579b2843622ec6a0
SHA1 25476bd8310e52bccab530ab615e0a05f9918f06
SHA512 46169f8d5077f68001f4dd347e1be8558cc152e6fc978cb469071d5e81c749ba41f3475f993becbabade7f95ec52d2b208bfb09ab7a7a10d8f93722f9e32004c
SSDEEP 49152:gaw3yd2OluON4fA9us0g7mM+M6RkMkIM7I067bwnNTBxpYqXqatgljjRBhTn9K:CM+M6RkMkIM7nb6wat3RK
TLSH
T197F56D41B7E046B1E0B345308962966ADA327C519E33CE5F1250BB9EBFB37819D35B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-23_423a6163b3b5b303579b2843622ec6a0_amadey_cloudeye_darkgate_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-23_423a6163b3b5b303579b2843622ec6a0_amadey_cloudeye_darkgate_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_423a6163b3b5b303579b2843622ec6a0_amadey_cloudeye_darkgate_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads