17a932001a9e5eb1c4fe6dc4cd64d0f62d9720b913a7c86d60ab4821caa4607b

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-29_028642cd947aa03ce16cd5af5f2d0cfd_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_vidar.exe
Size 658KB
Sample260529-krml2sfx8v
SHA256 17a932001a9e5eb1c4fe6dc4cd64d0f62d9720b913a7c86d60ab4821caa4607b
MD5 028642cd947aa03ce16cd5af5f2d0cfd
SHA1 0ba3d2338afbc4c4815be8a009301c3e4dbc420d
SHA512 a78680d3f0e3192b5337eca81b4ae873461c7e5b6f2136b2cd44c499f970e30dba6b320c743d555e5728b49dd6e1e11cedd10e21d468bb3c31390e5bf9d333b4
SSDEEP 12288:9gsHyMqLHFZlx22CGD3JeU7vinrmEWrCU4A:9FHDUT22CGD5TvinrmslA
TLSH
T1DFE44A4271D44FA5C69F4034CC968661E637FD954F214BEF12A87F697E322B0BA39223
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-29_028642cd947aa03ce16cd5af5f2d0cfd_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_028642cd947aa03ce16cd5af5f2d0cfd_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_028642cd947aa03ce16cd5af5f2d0cfd_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads