d16c325a66f73d94f63ebab7c7a6eb123ca3a44545cc87d58805a68e3ce3fd00

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-29_1f360e3ef42ab678693271ac0a5aecd9_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_wannacry.exe
Size 647KB
Sample260529-shrteaet2t
SHA256 d16c325a66f73d94f63ebab7c7a6eb123ca3a44545cc87d58805a68e3ce3fd00
MD5 1f360e3ef42ab678693271ac0a5aecd9
SHA1 d2593f18b788c827661c00ca71d90c9375dd3bf7
SHA512 515cdf6d18ce52a58fcb10b7ac2e63bc1f49fa8a0a93f1b6618ae35128a3da7ed837474b534b3650d0be2469ed5c854e893bcbb9600d6b3ffeb190e9ae1203cc
SSDEEP 6144:983nLbxKVJ3nCMkQe5HZAsHFZlx3stL1cCfTXkxqDbVC9fq4vcT93PiY+Fa7Bdv4:9gsHyMqLHFZlx22CaFsaY+FUBW
TLSH
T1A0E4AE6076D185B7EA930030CCE9DB7A6439FE910F2149EB73987B6E9E312D17E32215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-29_1f360e3ef42ab678693271ac0a5aecd9_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_1f360e3ef42ab678693271ac0a5aecd9_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_1f360e3ef42ab678693271ac0a5aecd9_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_stop_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads