8e6edd24570a8519c4909ae3aa7cd4e10563d2e2434665245727bb6bd0f207b0

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 21:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-18_acbc4421b0b017f8b8c646dc544ec95a_cobalt-strike_elex_icedid_njrat_vidar.exe
Size 514KB
Sample260718-1eswasdv4m
SHA256 8e6edd24570a8519c4909ae3aa7cd4e10563d2e2434665245727bb6bd0f207b0
MD5 acbc4421b0b017f8b8c646dc544ec95a
SHA1 9b1b5849a1585e2922c50023976ae3814ad0dbd6
SHA512 df3b8ae6fe1bf536b3f79a60d88ab5f5f9b6a618de0e816d626c93ca75889b77f4543893327f6397116a4c4483b4595dafdfe1eb9e9c553dd224aa9213422273
SSDEEP 12288:pKHPvDQeF5UfHOdXDPjH7MJzPnNUcCvX:EXDPjHg9PnNUcQ
TLSH
T179B43951F7E404F5F0B79A388D669511DA767C6A1B60CA8F13A8261A1F33BD18D38F32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-18_acbc4421b0b017f8b8c646dc544ec95a_cobalt-strike_elex_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_acbc4421b0b017f8b8c646dc544ec95a_cobalt-strike_elex_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_acbc4421b0b017f8b8c646dc544ec95a_cobalt-strike_elex_icedid_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads