Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
02/07/2026, 12:55
General
- Target 2026-07-02_b4bf6f1d836b9876c8b7a211824046d4_amadey_coinminer_darkgate_elex_glassworm_helldown_luca-s.exe
- Size 14.2MB
- Sample260702-p53mmsgz9q
- SHA256 f3361fa7c12136517d2c015f6c67a94b6f328e2c314517b7d303b0da2e313b47
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 3 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-02_b4bf6f1d836b9876c8b7a211824046d4_amadey_coinminer_darkgate_elex_glassworm_helldown_luca-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-02_b4bf6f1d836b9876c8b7a211824046d4_amadey_coinminer_darkgate_elex_glassworm_helldown_luca-s.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken