696b8be333b4eaed51916ef510767047f3f63c19b20b7bfe37307fcb00458e63

Analysis

max time kernel
150s
max time network
97s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 00:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-30_0a9e731070a8eedb49d0e1cd00b73bc9_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Size 15.0MB
Sample260701-a8svaadv2y
SHA256 696b8be333b4eaed51916ef510767047f3f63c19b20b7bfe37307fcb00458e63
MD5 0a9e731070a8eedb49d0e1cd00b73bc9
SHA1 84d107147c25d9111c64689cb01984431b49960c
SHA512 ad451e37cd2332dc47b1adfafbf51455aad940cdf75c7609202e5220faf5e7969708da0aa3e9a689a452e9ba756f5cd27e84c73beac61b1048073efeee76b8a9
SSDEEP 196608:squFIF0wuPlCKrjRNquFIF0wuPlCKrjRKLZ7pjK:NoUmGoUmM7tK
TLSH
T1BEF69E1273D44075F5B316319A3592655A7ABCA58F32CA8F33883D5E6FB16808E3A733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-30_0a9e731070a8eedb49d0e1cd00b73bc9_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-30_0a9e731070a8eedb49d0e1cd00b73bc9_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-30_0a9e731070a8eedb49d0e1cd00b73bc9_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads