fc4613d85e3eb5ce3d09e5427a4ed64753da2301e6c11fe31fb808dec0b8f984

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/06/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-29_c15711de748a1d34496b8b18d5185de4_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Size 6.9MB
Sample260630-ej877ad19z
SHA256 fc4613d85e3eb5ce3d09e5427a4ed64753da2301e6c11fe31fb808dec0b8f984
MD5 c15711de748a1d34496b8b18d5185de4
SHA1 3a931350dad2e7079da0345e008e23bd492a3516
SHA512 306143c9ee7e7e940a89d08b4102759d4d58c1c25fd9d3732ad31e6d13831fa707a4dd589d127ee3e067496350dbc8fcc61a82b0b0df0d6846277c985abe2dcd
SSDEEP 98304:KsKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUAeyzp:KsquFIF0wuPlCKrjRk
TLSH
T105769E1273D48435F5B31631893592695A7ABCA58E33CA8F338C2D5E6FB16C08A39737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-29_c15711de748a1d34496b8b18d5185de4_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-29_c15711de748a1d34496b8b18d5185de4_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-29_c15711de748a1d34496b8b18d5185de4_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads