715665795efc09817f64181a166a8ad09d08e5af3ea3f50cc337c58e09dcf642

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-07_91b7fbbf51346ba9deb0ac69e988937d_elex_smoke-loader_strictor_wapomi.exe
Size 80KB
Sample260707-yyernsdv8s
SHA256 715665795efc09817f64181a166a8ad09d08e5af3ea3f50cc337c58e09dcf642
MD5 91b7fbbf51346ba9deb0ac69e988937d
SHA1 f67712ce120dbde584988766bc389617fa98c148
SHA512 a2b18e0c8745eef9f9cff25c8ceca1cc9859126e661dde85bbba9ab7a4f81a5b76124ebd7ea043240ae1bcc7e9813035d66999ec8d613367817eee35d7704e27
SSDEEP 1536:LiIqGchJ3UxdE7egc2H+4UqCxZk1u1a728s2QYKlGCAGCq2iW7z:LiIqGchRL5eiiifKNxYTGCH
TLSH
T140838E12DBC904F5DA41ADB0203E7331D7B6AD864F1046ABE369DC1E0D7F626E83616B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-07_91b7fbbf51346ba9deb0ac69e988937d_elex_smoke-loader_strictor_wapomi.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-07_91b7fbbf51346ba9deb0ac69e988937d_elex_smoke-loader_strictor_wapomi.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-07_91b7fbbf51346ba9deb0ac69e988937d_elex_smoke-loader_strictor_wapomi.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1884-0-0x0000000000400000-0x0000000000426000-memory.dmp

Download