4bc49f90c9bf7e11475e81a462e7f9c60d86e498ac7c8e6ccb8f72943be9afd3

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-10_7f0c4ff1c02e62b3f38d9d95ad86b171_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Size 3.5MB
Sample260710-dbwrfsct6n
SHA256 4bc49f90c9bf7e11475e81a462e7f9c60d86e498ac7c8e6ccb8f72943be9afd3
MD5 7f0c4ff1c02e62b3f38d9d95ad86b171
SHA1 0fa24a9ea21dc8959a6f3f02427498e53cb1b41e
SHA512 6dbd8f5d88db0da89a5ecb252df30b188466ded0fa52ff31decd695e8e31d2c3a5505793bf57eff9f3d8328aa993ae057861ffa55f0272edde89dc84d1986f94
SSDEEP 98304:W6vYzj/GxZcA3gPAmVT+/gOmtHtD527BWG:LY3KcTIgOm7VQBWG
TLSH
T15EF5CF22BA02847DE9D31175E6EE677E4A7D6E10033584C793C03F6A58316D37B3A39A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-10_7f0c4ff1c02e62b3f38d9d95ad86b171_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_7f0c4ff1c02e62b3f38d9d95ad86b171_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_7f0c4ff1c02e62b3f38d9d95ad86b171_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-0-0x0000000000400000-0x00000000007FC000-memory.dmp

Download

memory/4848-1-0x0000000000400000-0x00000000007FC000-memory.dmp