84c8b1de2f75c307019d45590595727d80aae4bd163a14e9026e8ceb0c0f3fc1

Analysis

max time kernel
149s
max time network
129s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 09:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-28_66932ccbb0618503d148ce68a947f2ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Size 1.1MB
Sample260528-k2pt6ac16w
SHA256 84c8b1de2f75c307019d45590595727d80aae4bd163a14e9026e8ceb0c0f3fc1
MD5 66932ccbb0618503d148ce68a947f2ac
SHA1 e9a5b6095f15bcc48ee89c347fa4af8954e24a76
SHA512 cf8e2e867735a3c9aa46d22a07d9ed0565b66439470bff1c7b2e5103d80b59d9f942a9515d67e0606759f43c24f6cb0666adb0dd5e1bfac0c11e1a20cae3971c
SSDEEP 12288:JOxJIP2QGM2GAu1mt0LDwrepG8DAhnBNUbTYfUMD3JeU7vinrmEWrCUhwYrIkb/w:JOxJYdGM84pohLfUMD5TvinrmsghrxLw
TLSH
T18F355C23BAA4DEE1C27F49749A919641D773BC204F1053CB93789E5D3E326E06E39A13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-28_66932ccbb0618503d148ce68a947f2ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_66932ccbb0618503d148ce68a947f2ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_66932ccbb0618503d148ce68a947f2ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads