ea9ac6bd015727d50e562d3dc0b10ceed5e341d8ccbd9121f172da78bcacc1dd

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 23:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_c952660a30f09dd9f5ce942502d823db_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Size 7.4MB
Sample260810-3hhkva1dqa
SHA256 ea9ac6bd015727d50e562d3dc0b10ceed5e341d8ccbd9121f172da78bcacc1dd
MD5 c952660a30f09dd9f5ce942502d823db
SHA1 d018c9bda418cc4753b6d00506845a3c91947028
SHA512 9c1c44760c046e5c98bafe1b7f73112256e0052d1676f7ba743497aa5a725e5b4670440a856272961590b305519b54c9c30ebb77ad75cdc3a126c684a5c8d92a
SSDEEP 196608:5SmQaoRCP+sg2YZTSiEnT3NbcWxpSRMtFGRPp:5JJ2sg2CSiEnT31xaMtFOPp
TLSH
T1FB76BFA3B9808036C55203B0A92DBB7D5AFDEEB00561D153AF98265CEF728D3963D743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_c952660a30f09dd9f5ce942502d823db_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_c952660a30f09dd9f5ce942502d823db_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_c952660a30f09dd9f5ce942502d823db_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

product.db.new

Path C:\Users\Admin\AppData\Local\product.db.new
Size 193B
SHA256 f3ce4410c591bc934de421aed3e7f2a6907c0316350a4a70d8fde69f4319d3cc
MD5 da03fbe408c695cf9b6b49166d09fb36
SHA1 aaffc0fd4a5934cf2696f2b71af637a39d2c76a7
SHA512 82c182f2ed98f380aa2eb8263cc17fa948487c8331e7befe0d400ffe3b0f00588ac9e8514c85290674b286dacd998a37fa70b42feb5eea76dda114b877246681
TLSH
T1E8C02229C8448A3AC2481C32E1A18D8800B08C58269C57210B323C89A93765F6299300
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1644-0-0x0000000000400000-0x0000000000BB9000-memory.dmp

Download

memory/1644-15-0x0000000000400000-0x0000000000BB9000-memory.dmp

Download

memory/1644-44-0x0000000000400000-0x0000000000BB9000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads