47716595e9881a6942cb2bde1fcde00a50c9e60fca6a66fec7a30255d7485c62

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 17:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-29_94327d21631513c76aeae84008610f27_coinminer_elex_glassworm_smoke-loader_wapomi.exe
Size 1.8MB
Sample260729-vy45sa1vbw
SHA256 47716595e9881a6942cb2bde1fcde00a50c9e60fca6a66fec7a30255d7485c62
MD5 94327d21631513c76aeae84008610f27
SHA1 9aa1635587d95ce548f010fc0d75c88f5884a1da
SHA512 ece47ad76f8854df45d87e4d082e68fde161c8fa5f5b35fe9802797a08632ce0c46d2a0b508e79f7ecf1f5506d1d05dd280eda24e431a1281697f7ae5ed95259
SSDEEP 49152:86BoFanJpXxcol5s0rKWwzjIoiU70t7mF8h+bu:3AWJpXxJ5s0rKWwzjIoiU7nu
TLSH
T162856A69FA4789F1ED2B0DB0414BF7BF9A318B018431CD6AEA9CDD85FA73952101D329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-29_94327d21631513c76aeae84008610f27_coinminer_elex_glassworm_smoke-loader_wapomi.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-29_94327d21631513c76aeae84008610f27_coinminer_elex_glassworm_smoke-loader_wapomi.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_94327d21631513c76aeae84008610f27_coinminer_elex_glassworm_smoke-loader_wapomi.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1136-0-0x0000000000400000-0x00000000005EC000-memory.dmp

Download