b8567ab9f96fa981f6849f23116abc201452f13013ad50436be3ebc5643f6bf9

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_651166db3a1f3813e638fcf850c3b2a7_amadey_elex_emotet_glassworm_smoke-loader_stop.exe
Size 661KB
Sample260804-db43tstzat
SHA256 b8567ab9f96fa981f6849f23116abc201452f13013ad50436be3ebc5643f6bf9
MD5 651166db3a1f3813e638fcf850c3b2a7
SHA1 77bd63fb4615556bfde35a17a890504146d26c0e
SHA512 ed6a420fb9bf4978527fe2bd77f0cd78e5a4f0d85cbc22fd99355b08d734f8cccf6af3ccbf84ce4812b6caa9d22b15361795b89441a7c52cdc6f1bd5ffee49bf
SSDEEP 6144:bUAqq3VAWdHm56SiwybqveHC3Z+QE2dMQRcR0FZXpme97hI8WGNTNYdMzATVkQNW:gAqOm5yOvei3D6QRlHHxMGNTCWsTGQ4T
TLSH
T1F8E46B23BAE4E4F2D2BB0E755A61C350AB76B8314B31934FE360435DAD326D19E35B12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-03_651166db3a1f3813e638fcf850c3b2a7_amadey_elex_emotet_glassworm_smoke-loader_stop.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2508	2026-08-03_651166db3a1f3813e638fcf850c3b2a7_amadey_elex_emotet_glassworm_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_651166db3a1f3813e638fcf850c3b2a7_amadey_elex_emotet_glassworm_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_651166db3a1f3813e638fcf850c3b2a7_amadey_elex_emotet_glassworm_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads