7b086f30cf45e3dc855b105505e28bc740cb350f0733fd7b7a1b1c64e79a1f5a

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 13:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-22_cbdff92905c4d9e95040779f26aac324_cobalt-strike_elex_manuscrypt_rhadamanthys_stop_vidar.exe
Size 1.5MB
Sample260522-q1ycsscx3q
SHA256 7b086f30cf45e3dc855b105505e28bc740cb350f0733fd7b7a1b1c64e79a1f5a
MD5 cbdff92905c4d9e95040779f26aac324
SHA1 bd86f61b5f3d437905c164f1e5d6e6c85dd51eda
SHA512 ff3fbe6c102187a660e6bc60254646fc3c52c9ab41f37e3cb079be8e46b4ebf17cfce72dd1c541963be29e116e971b26394fe431ce503a7f95e526ad20f1d50c
SSDEEP 24576:V2Dt3YZ3y7oqy6i1zuxw7ljsarakkqt4nUwG:ADtoZYy6i1zuajsauZnJG
TLSH
T131652819E3E800A5E0BF5635CBA55151BA73BC322BE1D6CF22D0D13D1B36AD099B9B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-22_cbdff92905c4d9e95040779f26aac324_cobalt-strike_elex_manuscrypt_rhadamanthys_stop_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_cbdff92905c4d9e95040779f26aac324_cobalt-strike_elex_manuscrypt_rhadamanthys_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_cbdff92905c4d9e95040779f26aac324_cobalt-strike_elex_manuscrypt_rhadamanthys_stop_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads