3354cc37ebb2e1072e479d6b31a71f8742706735cbe3956469f7923e4da4e311

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 14:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-29_768ee2dfb532e5ccedf8932ab46ae969_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Size 1.6MB
Sample260529-rraqtaez2l
SHA256 3354cc37ebb2e1072e479d6b31a71f8742706735cbe3956469f7923e4da4e311
MD5 768ee2dfb532e5ccedf8932ab46ae969
SHA1 18295a9cefe0f99e57d9751ea8be0c3b777e1d0b
SHA512 b886b3b23d71af40a77ed3f3d9b7d8c1430225dfe6c5bcec46c7439822d2dac3f3e2d10e37a738bdd21b958fd8e25fc94cdfbab076ee4fdca6192fa42d33e8b4
SSDEEP 24576:+oJdXN0BN2qnw4a+edxoBrLdgguaewsAj7papUrEZ3G7s7n:+oJdXN0BMOwLloBrugxlj7UpmEZtn
TLSH
T130758C16BBE48875F1B345309E6A8314957AFD700F32869FB290772D4DB16C29E36B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-29_768ee2dfb532e5ccedf8932ab46ae969_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_768ee2dfb532e5ccedf8932ab46ae969_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_768ee2dfb532e5ccedf8932ab46ae969_amadey_coinminer_darkgate_elex_glassworm_hawkeye_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads