79a0199a7460810663531ac9e85da81850d8c97054523a03a4c667871938b57b

Analysis

max time kernel
149s
max time network
130s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 13:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-22_09e2e8e0f6d466c83d11388734a06eec_amadey_cloudeye_elex_glassworm_icedid_njrat_vidar.exe
Size 1.7MB
Sample260522-q7lycaft71
SHA256 79a0199a7460810663531ac9e85da81850d8c97054523a03a4c667871938b57b
MD5 09e2e8e0f6d466c83d11388734a06eec
SHA1 9cc6eb940daf8f599e3dc711890857595b0591d7
SHA512 ef7df97882039707e5f1ba130ed9a6742444f957dc4505cf915567dfd3cc0d38f9742582af459492534d1c52b24810973f73326b39b8a7c6a633fc2eece8c249
SSDEEP 24576:L4/izRXTOkMtrIceMaFPjkjD29rRDQYTqMi8CtBd2QHCHmTBW5Skxqatgl8bQslK:LakOElMaFLkSD3qJtb2IEqatgluK
TLSH
T168855B11F6A08672D0778171CA97A796EB713C511B3096CB1385BB6D2E337F29E36322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-22_09e2e8e0f6d466c83d11388734a06eec_amadey_cloudeye_elex_glassworm_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_09e2e8e0f6d466c83d11388734a06eec_amadey_cloudeye_elex_glassworm_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_09e2e8e0f6d466c83d11388734a06eec_amadey_cloudeye_elex_glassworm_icedid_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads