4493393aef825ce21b000c2e9f1cd64d8ece1d7eb62d6bfff587b2e156af976c

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 11:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-01_22251bf1e9bcb5fdc80e8bbe7e3596b7_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe
Size 4.9MB
Sample260801-narffstcng
SHA256 4493393aef825ce21b000c2e9f1cd64d8ece1d7eb62d6bfff587b2e156af976c
MD5 22251bf1e9bcb5fdc80e8bbe7e3596b7
SHA1 5c8bddc7806714ee95958f53923856cacc92c372
SHA512 575ad95e7c2b62dfc82210ce4ea1584c2f59569095377ed392f4f768dac21ae5b63060b9b91586f7e21ba36f62c73ad47dcfaa6910c0584fa6810f09dea37c2c
SSDEEP 49152:74YjIJlv3QGK2uyXIKK+QMibi3IFhs6d/8RLF0Q+jKi2h6bt/CrNQzEXDKpdt00U:74Y0bgqNXIEpim4A6d2GNU
TLSH
T171363A91F9DB04F5DA0319301467623F27346D098B34DBCBEA907F6AE877AE10E36619
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-01_22251bf1e9bcb5fdc80e8bbe7e3596b7_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_22251bf1e9bcb5fdc80e8bbe7e3596b7_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_22251bf1e9bcb5fdc80e8bbe7e3596b7_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads