33547290ef3ddc953f487d9a0b4e3327be4ddbab85f314434628f3349a08ff19

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-19_6509662095dd7e8824089894ac8740e1_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
Size 11.2MB
Sample260719-2bbchsgy71
SHA256 33547290ef3ddc953f487d9a0b4e3327be4ddbab85f314434628f3349a08ff19
MD5 6509662095dd7e8824089894ac8740e1
SHA1 83a8dceea3c1489fbf6e90636b80a924bb5dd708
SHA512 11ca3f31a8b3f9053a9c8cc77916175fd90388d7c01eca10aaab5a42e4ced97ba2c2f680ec9b13231bd4d3f97adaafe75b3ddc73dbcd57d27aea17120152b8fb
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA91pH2WpjHrgBFFu416AWqpi7pisA91pH2WpLpiO+40:tjDdTdMmHpn6F44IAWXmHpXjQ
TLSH
T1E4C64B5162E650F8E1BB92358A358732E6B67C134930934F13BCDA5A2F73650AD39B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-19_6509662095dd7e8824089894ac8740e1_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-19_6509662095dd7e8824089894ac8740e1_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_6509662095dd7e8824089894ac8740e1_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 17.9MB
SHA256 b5fda57cc4d20a8c558d7481153818e5d2b76a83dd6c20bae53bb9c8b217ea71
MD5 d20364e925a14d43f8ed333ae4b6a5d6
SHA1 a335fbc50069e1333657eabe8374c471c16a56cb
SHA512 10fcfaff415246f523c3eff1db7933bce20a98c5dabfa8541aa22e4ac1e2be9a1f25773ff65c2c8f55efd7193e2ca74b5d8a8ce03f032d365e4533e49ff074a3
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpXj7zzbqvT5wUWd5Sz8:tYmHN6+JrXmHZXnbG9wUWdK8
TLSH
T18A175B5566E591F8E0BFD1348D368732E6767C124E32A34B03B8CA1A2F73A549D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4516-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4516-13-0x0000000000400000-0x000000000040E000-memory.dmp