82388e725681a29c7326de78013974d2f9f03737d12a19582410c269b237609a

Analysis

max time kernel
149s
max time network
158s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 14:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-28_457e301924736657aaf0d6ba42f6d6bb_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Size 2.4MB
Sample260528-rtccescs5s
SHA256 82388e725681a29c7326de78013974d2f9f03737d12a19582410c269b237609a
MD5 457e301924736657aaf0d6ba42f6d6bb
SHA1 de9e0275d606c8fa0aea737135fcbf00f31da57f
SHA512 491cac5bbda84c94ea13f2e2d6a499b559ea77cf8fb1b9ecb929037aeae92c8dfe5237370c1297f0f72d144bf03133d6258ac59585caa7ff9cd62809bf7add62
SSDEEP 24576:JOxJYdGM84pohLfUMD5Tvinrm4zPP/u5jcAkSYqyEYExqatgl8bP:GM84pyLfUa56rH78pYqXqatglE
TLSH
T118B51822B9A48961DC2F4C748582A271F7327C5F3F1D77CB9E44B62D2E332D16A35622
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-28_457e301924736657aaf0d6ba42f6d6bb_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_457e301924736657aaf0d6ba42f6d6bb_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_457e301924736657aaf0d6ba42f6d6bb_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads