232a57bcce3905e4a4be568ed262aef91f9084beb65a4f722f41f4b0ea52e254

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-19_e4f054ccd6b3f644292b66884366203f_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Size 329KB
Sample260720-arprascw4v
SHA256 232a57bcce3905e4a4be568ed262aef91f9084beb65a4f722f41f4b0ea52e254
MD5 e4f054ccd6b3f644292b66884366203f
SHA1 2a88f057d6b8f5a21226033bdcbc886dec4f45ad
SHA512 13813aeb6e8b5f405c3bfc606633f16e0be3ffcbd4058737034fb50afdec6bec6b37e9ed5b026f92ff2a347170ff3c58b1e1e0efba0dc5f9e8d43cd42a9e6f00
SSDEEP 6144:ja7/VC9ob40cr0XU3psmeI+sQFqT3Qsa7fnYnC:jaEoE0pXsf3xavoC
TLSH
T1E9744906C6A800A5E66E4630E7A54A42BB77BD5256E0C3CF13D4F53D0F32380AEE6767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-19_e4f054ccd6b3f644292b66884366203f_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-19_e4f054ccd6b3f644292b66884366203f_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_e4f054ccd6b3f644292b66884366203f_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads