Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 11:16
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
- Size 2.3MB
- Sample260809-nc91ksab99
- SHA256 82825750114ece11044d25e588ec34675b44314dbb1b2e60a9320429d54d6529
- MD5 0281ea914ea55c1cced1f80289a55aaf
- SHA1 d8ea23e3cd16a860e16814e162c02e98b72f868d
- SHA512 5c43bf7cdf9a64a4fe50413aaeab91f8311f50cc87dc67bcbb6faa3d1f45ddf3c8c7f21672b3da8dcea85ac139914b90afc0dde32e605dbbae17342940c3fb96
- SSDEEP 49152:yzkYvuJCA+upd6N4uPu3MHFUOwPw+eYX4EOp0z6GXm:mnvuJEg6a2yMHJ9+ec4X
- TLSH T148B5AD52FB82CEB1F4920131A1AB873E4A7A5E2143E4C4D3C79D2C759A701D1B6FB3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_0281ea914ea55c1cced1f80289a55aaf_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3340