a3bdf4606a01fc71aa55ad8401ff14f019ecabf516b27abc091dc4d7d650413f

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Size 7.5MB
Sample260811-agh6rsxset
SHA256 a3bdf4606a01fc71aa55ad8401ff14f019ecabf516b27abc091dc4d7d650413f
MD5 001c6c61b7db163073f4414d7db639c3
SHA1 bb7d89699d4742b77711eef3b5fb8e06edc766f3
SHA512 451ad3bb55e1b0c62b54ac6801210f00e78dde596887dbbf6f1ceaafbfe396a6420a5eff7a7f118daf8f69cc499d53d2e0f611bed3b142c6eceec9ff58567c87
SSDEEP 196608:0Apupp6pui9LtzVmcqOyCuSfLkiaQJp0PqO8FohsGbDpp:0ApU6plTmcqOPuSDkkv0Pp8KsG3pp
TLSH
T1DF76AE63B5508032D65203B0593DBBBA5AFDFDB00762D1A7AF88254CEA729D1D73A343
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_001c6c61b7db163073f4414d7db639c3_akira_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
PID:1204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

product.db.new

Path C:\Users\Admin\AppData\Local\product.db.new
Size 193B
SHA256 c9c12525c6925e99101215a1965d459adc4dacee595942281b71a9de9ed971df
MD5 a7a6b0da8a49cd26c3afcb357cb68310
SHA1 df0c135d464a6fa69e06a0863ecfd7ec0bac36c1
SHA512 0f4ad2352e7f8d082e205bd22e35a0273c58732f5948d8fea1b0e235bc7293162cdc5deefc0ea41d6e19046dfbf8f72842197d664a0b47887ea1150dda62d578
TLSH
T1D9C02215C8448A3AC2481C32A0A1898800B09C486598A7210B323C899933B5FA299700
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1204-0-0x0000000000400000-0x0000000000BBB000-memory.dmp

Download

memory/1204-15-0x0000000000400000-0x0000000000BBB000-memory.dmp

Download

memory/1204-47-0x0000000000400000-0x0000000000BBB000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads