b4fffe9c7e03a861e810be2b18c4a1d419452ef284cc74384b7436e0731786fb

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 02:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-10_d235b227c1d377061d8c916198129cb3_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
Size 10.8MB
Sample260710-c73dfacs8r
SHA256 b4fffe9c7e03a861e810be2b18c4a1d419452ef284cc74384b7436e0731786fb
MD5 d235b227c1d377061d8c916198129cb3
SHA1 335dd59847d7da53d9503aa84360ca94aa698ba4
SHA512 5a3c0397950854a301c9660ae7374fea909fd0871dbb88b989821df899f4e00b560a9a5760643ee1b1ccb344c701fa9410b54ce86bd8db4509f4585de88dd04e
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA91pH2WpjHrgBFFu416AWqpi7pisA91pH2WpJ+4j8:tjDdTdMmHpn6F44IAWXmHpVj8
TLSH
T1B9B65B5162E650F8E1BF91758A398732E6B67C130930934F13BCDA5A2F73650AD29B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-10_d235b227c1d377061d8c916198129cb3_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_d235b227c1d377061d8c916198129cb3_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_d235b227c1d377061d8c916198129cb3_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 17.4MB
SHA256 3730b4d76cf99da7c706784fe5d8dbb552ff302d9fef325920c272cd9ff91b93
MD5 f787dcc359ed76383cb7f6483b5137b4
SHA1 a5fa71467242dc53488fdff87a07386c605590bf
SHA512 67e7860a3dc65f1f0feb79827fea0e99bc6ef8eeed867ef15173eccfc433116f66ee23a623d3001d440759cdf4964bbf52bd23cea7aea47b5d0626d040a44e08
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpVj/zzbqvT5wUWd5Szk:tYmHN6+JrXmHrrnbG9wUWdKk
TLSH
T111075C5566E591F8E0BFD1348D368732E6727C124E32A74B03B8CA1A2F73A549D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4748-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download