Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 10:35
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
- Size 4.6MB
- Sample260720-mm2xaaez6m
- SHA256 8de719f02934472e55019c98dceff47f9fdf75cd62189b3b76e13ce064b0dbdf
- MD5 08bd272d77b4b8ee1cffc5be5ab1ff80
- SHA1 8359f2002bb0d42d9d83c078384e77d6bc2a8fa6
- SHA512 dd768d91bcd16d976b553d9215315481d391ac8b0b295bcd76abc1bd4f1e045de339b847675d7f239b16956b860367e68ed3fea19fd82273c0cdaf1d2bf5ca06
- SSDEEP 98304:Aa4Xp6swNwda6YCeOqtg7Ur1ZqsaGBcx7tHPB:tdbOe5OUrLqWclj
- TLSH T16B26CF137B40C0B5E2520174AA7DBB7A49FDFA301B2186C763C80A6E4AB15D1AB377D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-20_08bd272d77b4b8ee1cffc5be5ab1ff80_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6000