a85b18c987c08f36bbcc3fec9b38614e4f64c89ada06823456e5c396453e4242

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 10:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-28_4c05a355ca06c24424ea732947fac063_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Size 1.6MB
Sample260528-l213vsd161
SHA256 a85b18c987c08f36bbcc3fec9b38614e4f64c89ada06823456e5c396453e4242
MD5 4c05a355ca06c24424ea732947fac063
SHA1 19005fc362819e833a09aedba9c46f567fb1d8b4
SHA512 1102295f581f9a5ff840ce42ca594a1091ed22c41568b467da8bd1ff0b1d39319c3b78c448bab4218a9a99c54b146a560671457130e56255af58736d1a583233
SSDEEP 24576:JOxJYdGM84pohLfUMD5Tvinrmvt+Rw4DkzCk/HmS5OFh:GM84pyLfUa56r4V4DZwGr
TLSH
T17675181EFEA49EE1C16F85748AA1835D9772BC600F1183CB5264BA1EFE33FD05D29612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-28_4c05a355ca06c24424ea732947fac063_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_4c05a355ca06c24424ea732947fac063_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_4c05a355ca06c24424ea732947fac063_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads