Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 02:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
- Size 2.2MB
- Sample260808-ddekysyelc
- SHA256 d8eaeeabcd76dc1e2e7ff86824ef5062cc4a6662cc4cb42a8e1f0617a18b4e0a
- MD5 b520a549886cb194e62c5a5c55491382
- SHA1 8639c92a029d56901f99de5ee727d7c0a5a4ce84
- SHA512 287d69fec3b4f361c42e87eda87c900c1b9e53fe07f8ff7a7756205d6a0db4cda67bff8bb17617a661823bdc026b245b004a90d6236abd0e60f9acb69dee958f
- SSDEEP 49152:erOO53RTqtihhbuRKwpBu56rvS1V56rXrG:erOO53BHervhr
- TLSH T1E1B51801A7E84FA1D1BF917589A29266F6737C514F3087CB1290BE2A7F336D0A939713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_b520a549886cb194e62c5a5c55491382_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3412