c5219c069042082614764d14def377ce961b42923f394c0a3d2d01e41bfbb6e8

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/05/2026, 07:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-31_04013c9fe78db5c6f0e27c39f3127fe8_cloudeye_cobalt-strike_elex_glassworm_hijackloader_rhada.exe
Size 813KB
Sample260531-ja8bract2y
SHA256 c5219c069042082614764d14def377ce961b42923f394c0a3d2d01e41bfbb6e8
MD5 04013c9fe78db5c6f0e27c39f3127fe8
SHA1 aa4d61b895fc1f417bddeb93dbe5539abe44c4ac
SHA512 0528369a4b1930ffd434c8cd3614d26208c9642acfef15f01deea38fc617f581ac92a029dd111bc0f421296248c6da33a724d532d019bcbb39684c1e847afed4
SSDEEP 12288:9gsHyMqLHFZlx22Cw+ZeDuUlEqatglsLb3cyUjD5hTP73UTDEKP7N6c:9FHDUT22Cwkxqatgl8b3QDeJ6c
TLSH
T16C056B81B7C185B3D59602318C6787A26B35FC921F22969B3398737DDE333C0BB26665
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-31_04013c9fe78db5c6f0e27c39f3127fe8_cloudeye_cobalt-strike_elex_glassworm_hijackloader_rhada.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-31_04013c9fe78db5c6f0e27c39f3127fe8_cloudeye_cobalt-strike_elex_glassworm_hijackloader_rhada.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-31_04013c9fe78db5c6f0e27c39f3127fe8_cloudeye_cobalt-strike_elex_glassworm_hijackloader_rhada.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads