c9a8dfe81da5d8ba0b7e9151fc83923d6013cb89d2b341f2ac501220cc2fe09a

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-01_36efdf87073e3f84381d0f15a28f56e5_amadey_cobalt-strike_coinminer_elex_glassworm_poet-rat_s.exe
Size 5.0MB
Sample260601-g36mhsdy21
SHA256 c9a8dfe81da5d8ba0b7e9151fc83923d6013cb89d2b341f2ac501220cc2fe09a
MD5 36efdf87073e3f84381d0f15a28f56e5
SHA1 a84845a36812d8d77b8f9bed8cfc08ef46d7acf2
SHA512 68ebf3d1911e653cd74985551e83f662cb4376dd9318a9f9d3d03d7c6a6a251974ed83415c398aa9392daa9194aef218201cd1dc897a93b5a0b7296e310966d5
SSDEEP 49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpnn:r56utgpPFotBER/mQ32lUR
TLSH
T1B3364B41ED9B45F2EB8712308CB31E5F6333B2190335EAC3DA654A6FE5276E46B36241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-01_36efdf87073e3f84381d0f15a28f56e5_amadey_cobalt-strike_coinminer_elex_glassworm_poet-rat_s.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_36efdf87073e3f84381d0f15a28f56e5_amadey_cobalt-strike_coinminer_elex_glassworm_poet-rat_s.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_36efdf87073e3f84381d0f15a28f56e5_amadey_cobalt-strike_coinminer_elex_glassworm_poet-rat_s.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads