Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/07/2026, 00:33
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
General
- Target 2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
- Size 8.0MB
- Sample260701-av65rabv4l
- SHA256 f06e5bc492f723f8f150bf8d76076cb05fbe7b2b980a8c0cd6718ceb37cd8f99
- MD5 154d1e7aa39b0302036a943c4ca13d2b
- SHA1 ab6083f38cc65e17d4bb16f941499720dd65dd4d
- SHA512 f88cd885a9703df5971dd16c4a7ba757635b45ecd86321b174b26901a6ab98e2fb5704498fbfd50ffc5b088b6a04dafcfe5cdf5b2e7590b1c6599d32df9cec34
- SSDEEP 98304:b2BHKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUxI2BCY:SpquFIF0wuPlCKrjRvxP
- TLSH T1A786AF0273D85575F1B312318A3592A5663ABCA58F32CA8F33883D5D6F716819E3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-30_154d1e7aa39b0302036a943c4ca13d2b_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6044