181f3ceb0a1c8835f3de7032993f84b188a20cd0b10bf04a13a5f59b112b17f0

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 10:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-01_f942e4f993e8bb4b882fc7853869a0e2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smoke-loader_stop_vidar.exe
Size 5.0MB
Sample260601-mf68esht3w
SHA256 181f3ceb0a1c8835f3de7032993f84b188a20cd0b10bf04a13a5f59b112b17f0
MD5 f942e4f993e8bb4b882fc7853869a0e2
SHA1 ed836e3e6b9541f48bd448e2e618598894952fcb
SHA512 23da2f799fc264ec9e64b1592aee4a25b8af8fd9f8c4abe533a7c03890319d341b89a2c84cfce9e0a1bba460d4eaba5894b1d3fd2456eabefb0514f3ddd104fc
SSDEEP 49152:VnW1PszNsQCy6i1zuajsauZjaAqJtb2IUMspeW4SkZP4sz9MbmIAOjVy6i1zuajP:VnW1Psz+tJSkfkZcvJtk
TLSH
T14A365C19F2F842A5E0B7E079C6A29656FA737811173086CF1384D63D2F37AD1D93A722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-01_f942e4f993e8bb4b882fc7853869a0e2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smoke-loader_stop_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_f942e4f993e8bb4b882fc7853869a0e2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smoke-loader_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_f942e4f993e8bb4b882fc7853869a0e2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smoke-loader_stop_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads