0b183089b8c74717ef1b24c8015cbfe66f4e3b7d0b82cc1e9b1574b85b301a67

Analysis

max time kernel
149s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 08:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-06_56a38f295f9c457b43e992f98cb3184a_amadey_blankgrabber_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Size 402KB
Sample260606-kapp3sa17v
SHA256 0b183089b8c74717ef1b24c8015cbfe66f4e3b7d0b82cc1e9b1574b85b301a67
MD5 56a38f295f9c457b43e992f98cb3184a
SHA1 09f135bea14bf0e5acc1d980c0c7f41d4fa38d9b
SHA512 d344cb538f360f9309f47a27f53ea72655624ed38c2bf6e115b1454414445fb9647cb5a9028374d470f82aff8526018d326f969b59443afa8c0a5aaeb9891100
SSDEEP 6144:jy7rPgCsL5S02VI6qO7K0PyfyQhmiiQkKPZes+y7GGOQDC33LPbJX6e1QvYbNfmb:mECsLQ0Xp5cyD3n+y7GG46oQ0ub
TLSH
T1FD94AE20BC92E933D7FB04B44D95CBB9863EA834075198D73BD40EF9B9212D057F869A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-06_56a38f295f9c457b43e992f98cb3184a_amadey_blankgrabber_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-06_56a38f295f9c457b43e992f98cb3184a_amadey_blankgrabber_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-06_56a38f295f9c457b43e992f98cb3184a_amadey_blankgrabber_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads