c4afbd21ae4e1aab4d817d6a51ad729963319bc42c484c59c93dec10fbdb6044

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-05_66ae34ed4083a9bcb11b6ad0faa9140c_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe
Size 1.5MB
Sample260605-qa671sf18x
SHA256 c4afbd21ae4e1aab4d817d6a51ad729963319bc42c484c59c93dec10fbdb6044
MD5 66ae34ed4083a9bcb11b6ad0faa9140c
SHA1 22f59b4e3d243083b9e803d38b280640908c232f
SHA512 8ae166b1427c0bb460de4018d6ceeb5a904a8b1dae3bade94bc9faa64dc3f91e1fdb7909199dd3bf5e48a2e88244c760f5111ac05c705656ab3a15ee995fb8c2
SSDEEP 24576:SuvFJ4rRoNk7BZpUw/rLx/WnSyhbzvZOqU1bI3A:SuvF6rRokpVBWSytLoqUZ5
TLSH
T1B9654B21B690D03AD0B31AB19969CBB56D39BE211F2098DB67C03F5D3F71682D53632B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-05_66ae34ed4083a9bcb11b6ad0faa9140c_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-05_66ae34ed4083a9bcb11b6ad0faa9140c_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-05_66ae34ed4083a9bcb11b6ad0faa9140c_amadey_cobalt-strike_elex_hijackloader_redline-stealer_r.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads