77d219055ad3d9177a0da8f0e66fbc619bf2d45f78a9d28a54585a875bd3f67a

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 23:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-30_f407c49d80e23cb5dd54a8c704b34116_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe
Size 20.1MB
Sample260730-3b4jqsstdv
SHA256 77d219055ad3d9177a0da8f0e66fbc619bf2d45f78a9d28a54585a875bd3f67a
MD5 f407c49d80e23cb5dd54a8c704b34116
SHA1 2d0c7fe9a923df8188af475aeef991e2e4477e67
SHA512 1867fb8620aa7f79f4bc2c9ffa2db04d88c96d93ca374a5dbc2ad1512db59188e3d511b4c8d1226c949408520f800864fdb3b06f5b31b3bccacce2431e827cd2
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpn6F44IAWvojkd2Zd0p6dpJ:tYmHN6+JrXmHN6+Jrvol
TLSH
T118275A5162E660F8F1BB96358A798731E6727C134931934F13ACDA0A2F73650AD39B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-30_f407c49d80e23cb5dd54a8c704b34116_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_f407c49d80e23cb5dd54a8c704b34116_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_f407c49d80e23cb5dd54a8c704b34116_amadey_cobalt-strike_elex_glassworm_hawkeye_hijackloader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 26.7MB
SHA256 e15f5d4e06f6c49c2fc5ac30b6ac9b2fd0a2beb94a3135a47a8c211adac9a709
MD5 d8c366554b486dbac9b40516693a0252
SHA1 2cd171de4e2eba1b8387be7b082106c81a9f6dc8
SHA512 a8295f4822eda517ff20b9c3cea8048bcd3839751acefa29e33732e6a4d970d4b4d6fe2784a02f74bf10f1421ef9d1fa4fe69b78789426c0e0dbe285ea1941a5
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpn6F44IAWvojkd2Zd0p6dpOzzbqvT5wUWd5Szo:tYmHN6+JrXmHN6+JrvoynbG9wUWdKo
TLSH
T19C576B5562E690FCE0BBD2358A768731E6727C134A31934F03B8DA1A2F73A549D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2720-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/2720-11-0x0000000000400000-0x000000000040E000-memory.dmp