24efaf31ae97b30a41ee7e8dfd34f66f93b61b1479988053b1f05a6e2a0ab71e

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-29_9bc44cc0daf1c6800cd10bba2e7d4696_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadama.exe
Size 1.7MB
Sample260529-tk2basgt6y
SHA256 24efaf31ae97b30a41ee7e8dfd34f66f93b61b1479988053b1f05a6e2a0ab71e
MD5 9bc44cc0daf1c6800cd10bba2e7d4696
SHA1 372b8e13b374e126f4e15a04a7732c8f7f1943fe
SHA512 d653e731c34dbee19430728ac5bcd8a9d58f5a9367af6dd1c3848f77a1221f363ea298253219778b4978b3d1761c6dc18f92d42f918a6d8174f8284f72e17069
SSDEEP 24576:9FHDUT22CGD5TvinrmxExqatgl8bJZe0p4Ek4niOkl/A04szE87JKTvm5x:9Vs356rnqatglweW4SkZP4sz9Mb2
TLSH
T1A4851956B1788B63D0BB8075C897A696FA337C450F2047CB0259BB6C3E337E19636726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-29_9bc44cc0daf1c6800cd10bba2e7d4696_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadama.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_9bc44cc0daf1c6800cd10bba2e7d4696_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadama.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_9bc44cc0daf1c6800cd10bba2e7d4696_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadama.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads