a8628fe1c0c82aaa6e1a83afbab2c703a6d11a71d263adf98f054a7b04422f09

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 08:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-02_b12acf799f1a47c344542ef833540caa_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
Size 11.4MB
Sample260702-km19msey21
SHA256 a8628fe1c0c82aaa6e1a83afbab2c703a6d11a71d263adf98f054a7b04422f09
MD5 b12acf799f1a47c344542ef833540caa
SHA1 002b3d7b50c2e27ddacef591c773bc93f9cb1030
SHA512 2a7f1d9edd69cce4edd954403a751fa3c6f1f6e390d83711c4ad6003b2bf8aaa4a2dd2efb1bf0cb18180cd872cb53cc29abec8152e4e7c63bf0fb15729e87eda
SSDEEP 98304:bZKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xFKRuy5a/OU/jIEeQfoR/IuOFVW:dquFIF0wuPlCK8quFIF0wuPlCKrjR
TLSH
T1A4C69D1277D48031F5B316318A7592695A79BC658A338D9F338C2D9EAFB16C08E39733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-02_b12acf799f1a47c344542ef833540caa_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-02_b12acf799f1a47c344542ef833540caa_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-02_b12acf799f1a47c344542ef833540caa_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_ele.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads