84206c455c168595d474a5e99ba08d55f28ff74d82c6c8252d716d0cff6252ef

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 12:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-01_d022a66a9e4d95bfc1a5d552c89afd9d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smo.exe
Size 3.7MB
Sample260601-pqrltsd15p
SHA256 84206c455c168595d474a5e99ba08d55f28ff74d82c6c8252d716d0cff6252ef
MD5 d022a66a9e4d95bfc1a5d552c89afd9d
SHA1 148e170e29ccca9cb975f926aeab490b3aeac26d
SHA512 ad85466adf05aab5f54fd453495794d6c9bbca3508023c17a46cd41d6089e76dfd9f11301f93d6e588618f51e013ad20c756d5bc1b54a235b8f532f6e264068c
SSDEEP 49152:VnW1PszNsQCy6i1zuajsauZjaAqJtb2IUMshRW1PszNsQd:VnW1Psz+tJSIRW1PszZ
TLSH
T1FC065B12E3E401B0E176A435C6A15269BA73781197728ECF1384DDBDAFB3AC19939733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-01_d022a66a9e4d95bfc1a5d552c89afd9d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smo.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_d022a66a9e4d95bfc1a5d552c89afd9d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smo.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_d022a66a9e4d95bfc1a5d552c89afd9d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_smo.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads