e2c0b8a2ad85c77cb198a0881fbebd9b4eadf4b97d879c03983ef9c1fe516fce

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 02:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-30_c2d8fac6fa153416b37b201c934935e8_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Size 11.5MB
Sample260701-dfrnasc18q
SHA256 e2c0b8a2ad85c77cb198a0881fbebd9b4eadf4b97d879c03983ef9c1fe516fce
MD5 c2d8fac6fa153416b37b201c934935e8
SHA1 ac4b497d4b3db9f66d3f0242e05b99f5215d83f5
SHA512 61034e64170796e265c8bb6937402bc8f3c50c8abefe73c9bc79e8b7ae271e7334c9060ac7d80d332e34e9155ff77670711c034a50151ee4a29d04f5d1ec88d3
SSDEEP 196608:PnTLZ7pjFTObquFIF0wuPlCKrjRQ0LZ7pjinTLZ7pjFTO:h7tFVoUmf7tQ7tF
TLSH
T118C6AD1272D89871F1B201319B3592A56A3DBC645B22C98F73C83E5E7F71581BA3A733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-30_c2d8fac6fa153416b37b201c934935e8_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-30_c2d8fac6fa153416b37b201c934935e8_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-30_c2d8fac6fa153416b37b201c934935e8_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads