Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 11:36
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
- Size 2.3MB
- Sample260604-nq4eyset8p
- SHA256 ef2c3bc8b01fc903897ddd9550c7d4df5bea6c0a924101b0817b9e7dd6e51b11
- MD5 79f5ad4a22fd1ef9c371722874a09837
- SHA1 bc4945525c406877ad95f886de724cc4f5f58bfb
- SHA512 05ee5880b59d34687b1d882f26f5a9ac9c5a57fc7258dcd73ed1698e9065394390fa512e39b0407f53d27fe67d4d418f0389b3f3eecff590456e03e9f906a04f
- SSDEEP 49152:oIr7MFjVA239fxpqAqV7mIV/ek1lPfXAYyJpuAceyfr:oA7MXAGHqjgge2ZXeu
- TLSH T13FB5AE12BB8282B1E9D60835667A4B7F4D3D7E20032CD4D3D79039AA5D711E17E3BB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe - Suspicious behavior: EnumeratesProcesses 34 IoCs
pid Process 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe 4028 2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-04_79f5ad4a22fd1ef9c371722874a09837_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4028