170606274dc9d5e549674f819b2f886f47c63b8b93bb0750689ef6b9cc914725

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/05/2026, 14:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-29_452b99ae7b5642a4569921e7ca288632_elex_emotet_glassworm_icedid_remcos_stop.exe
Size 3.0MB
Sample260529-rb18tsc19w
SHA256 170606274dc9d5e549674f819b2f886f47c63b8b93bb0750689ef6b9cc914725
MD5 452b99ae7b5642a4569921e7ca288632
SHA1 ab89a7d65b8cfc3349b2123e9ef5baedbf5780db
SHA512 8e04d10e8d193f4efdc21859be01e304024c23a1789e7622be59127d20fd6f208e4d74fc539a19a1705b98d1824d8cf19bf4105520b627e4a0f4fcd2e5d9027e
SSDEEP 49152:6AgIv5/JAOuRMJTOYP4HJgkZiJb88l1U7qp/kyTk7L6ut/Uqm+R:6AgmAbRM1OYApSh88l6Smt15R
TLSH
T1FBE5AF51F7C9C5B3E5A306B4407697BA893AFE422F2885C3DE44390F49325E7AC352A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-29_452b99ae7b5642a4569921e7ca288632_elex_emotet_glassworm_icedid_remcos_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_452b99ae7b5642a4569921e7ca288632_elex_emotet_glassworm_icedid_remcos_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_452b99ae7b5642a4569921e7ca288632_elex_emotet_glassworm_icedid_remcos_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads