7147e052da7a13366b7d5f3c3d948c0fedf86a92efe4a4d68bc3bbebd6b4d37d

Analysis

max time kernel
149s
max time network
114s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-28_5a2ea57a025cb347d29112438febbe2d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat.exe
Size 460KB
Sample260528-vxtmnagv6j
SHA256 7147e052da7a13366b7d5f3c3d948c0fedf86a92efe4a4d68bc3bbebd6b4d37d
MD5 5a2ea57a025cb347d29112438febbe2d
SHA1 bf8f1e3fd6421b1ce8faffc0d1e360d79a8f55cc
SHA512 4bd8a08782810be43da7136532fdf1d5f431d2d2b8d8f4c093f50333d9cfc70d677ce2811a7d0ce03c7937a8f8bd01a95e92c103073f8ae554607c6b1bee7d17
SSDEEP 6144:o5rFpHfc7gJtFA3pAVato8vsEkZV+4LhBogvp6hGo5vFPbDyIwL8WrCliA:obp/ccJtK5TvsI4c9V5v5fPrWrCUA
TLSH
T1D5A45A42B2C45461E5731D316E75C6218D3EFD694C618E4E63AC6E6A0E317F0EA38F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-28_5a2ea57a025cb347d29112438febbe2d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_5a2ea57a025cb347d29112438febbe2d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_5a2ea57a025cb347d29112438febbe2d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads