c712c7d2b6eced26325e068aac41a35834d238c5856649992336077c8f3c536e

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 09:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-28_f930a35c9298b8dafeed4da5c79655ce_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Size 2.1MB
Sample260528-lnkhyscs3k
SHA256 c712c7d2b6eced26325e068aac41a35834d238c5856649992336077c8f3c536e
MD5 f930a35c9298b8dafeed4da5c79655ce
SHA1 f027214f829da1ba95d62c4ee0d01f69e8001dea
SHA512 f5744112c8f2123f63a9ab74d885c91c252438e3ad8c94bcccc2484268b107f030dbcf8083e0dcd55c3b0c6eebae56f9d760d03d3bef34181065439000ed765e
SSDEEP 24576:JOxJYdGM84pohLfUMD5Tvinrms3YTqMi8CtBd2QHCHmTBW5iw/rzl:GM84pyLfUa56roqJtb2I4N
TLSH
T1ECA55B22B964DA75C07B89B4CA91C7A5EA327D110F2097CB52947F6C3F336D1893A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-28_f930a35c9298b8dafeed4da5c79655ce_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_f930a35c9298b8dafeed4da5c79655ce_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_f930a35c9298b8dafeed4da5c79655ce_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads