ebf233b04d47b9d1487e9f9ae47561e31235a09904823f387bff91626c1ad70a

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 04:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-06_44ac825d76f41e72da8265bd750738fd_amadey_bkransomware_coinminer_darkgate_elex_glassworm_ma.exe
Size 11.2MB
Sample260707-epe7ashv81
SHA256 ebf233b04d47b9d1487e9f9ae47561e31235a09904823f387bff91626c1ad70a
MD5 44ac825d76f41e72da8265bd750738fd
SHA1 426dd74133bee590dfd43abc54baa96ef936ba1d
SHA512 599b8628f533487793499bd39890f4497d1937f1848f3598a63351f4b2523af3bfaf564b4009c989a6812b1d6e1f638c2bb71a5ec3b1a44ee120b1151dc9003c
SSDEEP 196608:1yMOvdkKfr+EFb0CiQWj5kTwGs4jUMVB8KUgCi:dUfqEFbR7OVMb85i
TLSH
T1C5C69D53E29141E5EC9211F92166233A7D3AE7264319B1C3D7D129B2AA700D2F93F78F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-06_44ac825d76f41e72da8265bd750738fd_amadey_bkransomware_coinminer_darkgate_elex_glassworm_ma.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-06_44ac825d76f41e72da8265bd750738fd_amadey_bkransomware_coinminer_darkgate_elex_glassworm_ma.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-06_44ac825d76f41e72da8265bd750738fd_amadey_bkransomware_coinminer_darkgate_elex_glassworm_ma.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads