e3f801eccc36c75079b7d961aed87f646602e3b26c091ca417c5107ace0ac733

Analysis

max time kernel
150s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 13:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-12_3fa407a0a3869e2c3fb0d9dbcbb4ff6d_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe
Size 26.1MB
Sample260712-qtraxacy3x
SHA256 e3f801eccc36c75079b7d961aed87f646602e3b26c091ca417c5107ace0ac733
MD5 3fa407a0a3869e2c3fb0d9dbcbb4ff6d
SHA1 f0adb9e26d06edb5a8cae43eca04a88465fc7d41
SHA512 18a9ee19cc9748670a2a920dfd13b4040b347f121bcbc737e4dd8cd8900b9fee34c3c0633ab3612a201dda03722bd68e86fe435b8c2e4170b3505d563fcd4e89
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpn6F44IAWvojkd2Zd0pXrdYmHpn6F44IAWv+:tYmHN6+JrXmHN6+Jrvo1mHN6+Jrv+
TLSH
T1AD57495162E760F8E1BB92358A7A8731E6727C130931934F13BCD65A2F73650AD29B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-12_3fa407a0a3869e2c3fb0d9dbcbb4ff6d_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-12_3fa407a0a3869e2c3fb0d9dbcbb4ff6d_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_3fa407a0a3869e2c3fb0d9dbcbb4ff6d_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 32.7MB
SHA256 6f14bbe40ee72826e159e184659c7914cb7b30052f7e657e34280211d24aae9d
MD5 a066cecc2321b05ce4d9185a742ae2d0
SHA1 b0e5a7c8043389e55fe450fbe5e12b5313012cdd
SHA512 4d1f6c33a54aafae273e8358b4f0387c42f36f20801bb1279af70ad87545ebc8266fab9a6b7ae2b77143665b603e7ddbdbd967dc98581d80a6b0d22977052d70
SSDEEP 393216:tYmHN6+JrXmHN6+Jrvo1mHN6+Jrv9nbG9wUWdKg:/brWbrzbrV0wf
TLSH
T1AE77495562E660FCE0BBD1358A7A8731E6727C134932930F12BCD61A2F73A54AD29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4332-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4332-8-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4332-18-0x0000000000400000-0x000000000040E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads