5864076d2dd2f9efb7cf9378d8d844b2fd4699bfe98d4e45b00562640e4a3536

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/06/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-29_b55c22128389d5efb12befb34d4f59eb_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Size 6.8MB
Sample260630-e7t36se17q
SHA256 5864076d2dd2f9efb7cf9378d8d844b2fd4699bfe98d4e45b00562640e4a3536
MD5 b55c22128389d5efb12befb34d4f59eb
SHA1 140b4c8051796d5220fdae966b4c3ed20e561ce9
SHA512 f5b7e95b1ca5ae0fd4750474c61f3da0d3ea05aaaf3c0a44ffeddd164f648198f3bed10169606cb1a374d5d6b2f4d20c24a433508e81caa037d64011840f0ac0
SSDEEP 98304:HcKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxK5:HcquFIF0wuPlCKrjRvK
TLSH
T16C769E1273D84035F5B3163199759229667ABCA58E33CA9F328C2D9D7FB16808E39733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-29_b55c22128389d5efb12befb34d4f59eb_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-29_b55c22128389d5efb12befb34d4f59eb_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-29_b55c22128389d5efb12befb34d4f59eb_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads