1a3c7e73b11df4d55557c0ed639ea0aa0dc6cb8f2996f719d92a834593869ca3

Analysis

max time kernel
150s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-10_464a8fa6215b482cab877bdf2540f125_elex_emotet_icedid_rhadamanthys.exe
Size 252KB
Sample260710-e5h8wset6z
SHA256 1a3c7e73b11df4d55557c0ed639ea0aa0dc6cb8f2996f719d92a834593869ca3
MD5 464a8fa6215b482cab877bdf2540f125
SHA1 a964480221680b499de638a89f6387be663844b9
SHA512 138692af57fe9c206ba1a198829ae486b916002942c940fb15ae4340c1707dd46aecbcdc9a92db41b7a96395b20732c2bfe4c7bd14662068061a4b79efac34bd
SSDEEP 3072:5TR5rST7g9MfL4naha0AvOk71uF9OnOBf/2N+lNyJAKXe9jNtbXEK5I:5TS/1L4ahzIvUFYOBrKO9jNtb0K
TLSH
T1AA448D223680D4B3C5A305309AF99765E3F5FDB09727A247B744370E3EB1692D62E34A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-10_464a8fa6215b482cab877bdf2540f125_elex_emotet_icedid_rhadamanthys.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_464a8fa6215b482cab877bdf2540f125_elex_emotet_icedid_rhadamanthys.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_464a8fa6215b482cab877bdf2540f125_elex_emotet_icedid_rhadamanthys.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1156-0-0x0000000000400000-0x0000000000442000-memory.dmp

Download

memory/1156-1-0x0000000000400000-0x0000000000442000-memory.dmp