99206256e96864e788d6be53a9c55d5b73b73ba48ad0118adfbeea28e27e7b3d

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza.exe
Size 2.6MB
Sample260817-ysf3jsgr7w
SHA256 99206256e96864e788d6be53a9c55d5b73b73ba48ad0118adfbeea28e27e7b3d
MD5 13a5d80c9ee637567367be73adec8f44
SHA1 ab0cef24318d9d1049e5c46b8e16638f728c411d
SHA512 10c07e1a549e2f2fe67d1a493ce1cae4f9369b5575f05f89e2783d897d0fed2c2bcbf8218e4aea7aad1259286e33dec13b4ceb226ce1bff684ffa71b16bee10a
SSDEEP 49152:O35DMnCIjtAybcY/VDkYOMwwnMb4PmyVkDzx:B55qXYOXwnS4rVkDF
TLSH
T165D5B6117ADF9776CC7042308F3C99A801617D50A7E6DE9731993E9EFAB3648292F123
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-17_13a5d80c9ee637567367be73adec8f44_elex_glassworm_mespinoza.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads