ac05a0d73acc56bc0d9d063caff87396f341a6a8ff256678da53e9511268de6c

Analysis

max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 11:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-30_42677164f77df8496332e6d21862eba9_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Size 903KB
Sample260730-nng4yazzft
SHA256 ac05a0d73acc56bc0d9d063caff87396f341a6a8ff256678da53e9511268de6c
MD5 42677164f77df8496332e6d21862eba9
SHA1 2812333b65847e26e9eb3b28a23b70642b8cf1a0
SHA512 7714260d87af91df0a5d20272281e0f125f1911c2db38212199e608461e88a4dca5f61925df1b92af130e4f4d945887de2b4a6cd68737625c55d75d5db0dedcf
SSDEEP 24576:jaWKKNbeYTqMi8CtBd2QHCHmTBW5MSwpD:tqJtb2IT
TLSH
T18F15F625E6648361D07EC075C7D2A69AFA3338425BF086CB12C5E27C1F276D199FA723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-30_42677164f77df8496332e6d21862eba9_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_42677164f77df8496332e6d21862eba9_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_42677164f77df8496332e6d21862eba9_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads