6ec848a4d5dd5775c994c7bb8bbae14a52110ccda57c87abe70b71db5337bb2a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/06/2026, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-25_54a6f58f743e009a2ada4ca2102643e3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Size 210KB
Sample260629-2awbashx4p
SHA256 6ec848a4d5dd5775c994c7bb8bbae14a52110ccda57c87abe70b71db5337bb2a
MD5 54a6f58f743e009a2ada4ca2102643e3
SHA1 364ba7cac31c89a85e3a6661c060e354f6ccfed2
SHA512 b1525daab74f366a3936ff7fbc548c96c06ebe8208cfb075fd97e5fd50b584d132ce19a4bf1689ba7eb9e89b36aab44e216e8802c8856ad8ec6206d0095d7c52
SSDEEP 6144:ja7/VC91iOWTSIoXNHnr1GJOl4uvjgddFUij:jaE8OWcRGJlF5j
TLSH
T1DE248E07B7AC00E8E3AB9638D5E24A46E7767C66476187CF0364861A0F737D0EE79361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-25_54a6f58f743e009a2ada4ca2102643e3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-25_54a6f58f743e009a2ada4ca2102643e3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-25_54a6f58f743e009a2ada4ca2102643e3_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads