1898f50268f4f7b8cffbd84e14f7c06b89f3d656738aa57d66b9522a816c90ab

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 20:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-25_b541b32193a6d6eb0cc668634a605f55_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Size 1.2MB
Sample260629-y3p37sew21
SHA256 1898f50268f4f7b8cffbd84e14f7c06b89f3d656738aa57d66b9522a816c90ab
MD5 b541b32193a6d6eb0cc668634a605f55
SHA1 f4e9b2daa21f161bca82e0479dec641002856dae
SHA512 744c82e438723cb79f45970b7caec4e63f3641035386765b0b23f666df29ab48001a989b4296bb7f2bc2c391d27b0b509de65ff3ce3319f0a39601c762e1b25e
SSDEEP 24576:jaicNJsHZe0p4Ek4niOkl/A04szE87JKTvmlD5Tvinrmb:DeW4SkZP4sz9MbE56r
TLSH
T19345F715F5788B23D0BBC0B9C5D66A99FA333C465F308BCB02459B283E276D5863573A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-25_b541b32193a6d6eb0cc668634a605f55_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-25_b541b32193a6d6eb0cc668634a605f55_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-25_b541b32193a6d6eb0cc668634a605f55_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads