f123a0af75fd7642bf624d47a692190be9d5ef802f0c829d7ec91ba1ed22f528

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 02:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-03_df1d4af4be0a6e264badcee999b17a1e_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
Size 19.4MB
Sample260703-cy39dae16j
SHA256 f123a0af75fd7642bf624d47a692190be9d5ef802f0c829d7ec91ba1ed22f528
MD5 df1d4af4be0a6e264badcee999b17a1e
SHA1 0e4e5c2ad82e92fe8c3a39df78c89c30bacb202f
SHA512 2a2c1998840f976842a7382712d7ee037da657c9befd36fcf99317508c95ad0ebcbc098454eb9fd8686e3fa3fc930159f5dadd929480aa955765618c66b26ddb
SSDEEP 196608:8OcquFIF0wuPlCKrjRUOcquFIF0wuPlCKrjRUOcquFIF0wuPlCKrjRUON:Z9oUm79oUm79oUm7N
TLSH
T1F727AE1273D84435F5B31631993592295A3ABCA58E33CA9F328C2D5E7FB16808E39737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-03_df1d4af4be0a6e264badcee999b17a1e_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-03_df1d4af4be0a6e264badcee999b17a1e_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-03_df1d4af4be0a6e264badcee999b17a1e_agent-tesla_amadey_cobalt-strike_darkgate_elex_glassworm.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads