e16be5df20607ccd37f9b98283ed609f6973ef83ff48d69bceb264cf24839454

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-05_4c8b49452f656eeaa77784c95556fdd9_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Size 132KB
Sample260605-ph3n5ae15x
SHA256 e16be5df20607ccd37f9b98283ed609f6973ef83ff48d69bceb264cf24839454
MD5 4c8b49452f656eeaa77784c95556fdd9
SHA1 0d1c9c16062409055a13f8f1e9b3197312e1fafd
SHA512 7f8e17a6167aa99d9ffd63920e7c48a4d99def493a3bfd9e4e5cbec34e565007c22b0fb4013c9491b2ab46d033f8d7af619ef2455e0ee8fc6d4d8a5959ee0295
SSDEEP 3072:homCP11dXK6oxT1WSXBx2Xdr9ebYlx/oAMWxsVZ028xK:hVC9faTniRe0Bgiw
TLSH
T129D37D12CDA40CA6FA064670B4E5064ADDB9BE57AAD1C3CB732CC1141F61781BB993FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-05_4c8b49452f656eeaa77784c95556fdd9_amadey_cobalt-strike_elex_hijackloader_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-05_4c8b49452f656eeaa77784c95556fdd9_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-05_4c8b49452f656eeaa77784c95556fdd9_amadey_cobalt-strike_elex_hijackloader_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads