3070201f3115b4351fa621ac319bb902cfa2dfc58c438f0eaa8d416d0301b036

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 03:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-17_5872cb1d98f734ee594e0c322831a54a_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Size 3.8MB
Sample260718-eb95hsft4p
SHA256 3070201f3115b4351fa621ac319bb902cfa2dfc58c438f0eaa8d416d0301b036
MD5 5872cb1d98f734ee594e0c322831a54a
SHA1 7295bce4bcfa7a3b7cf8b716b7fe01846c2e272b
SHA512 25341a7e4971782a84de18bce0355b259a86555299fece567ff44a77c67d854231b818000866fc05720cf4dda834b9933215d8d721aa439c07288ab2290fb7fa
SSDEEP 49152:BK0DZT88fIfi35DMnCIjtAydIgjdsk9WnO1Pji0AjcrGdpYqdYcLCpYqXqatglE:BK5N55sgjOk9WOljox6sYcLC6wn
TLSH
T11A064A12F6A48BF5D4778075C9D2A269EA723C510F30D7CB1289A72D2F33BD19936722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-17_5872cb1d98f734ee594e0c322831a54a_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-17_5872cb1d98f734ee594e0c322831a54a_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-17_5872cb1d98f734ee594e0c322831a54a_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads