78d8f5f4eb3a3a0722f089e59e69bf6de37b2cbeaebaad8537ac14a5f2f32fb5

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Size 3.7MB
Sample260810-e5z7eabj8v
SHA256 78d8f5f4eb3a3a0722f089e59e69bf6de37b2cbeaebaad8537ac14a5f2f32fb5
MD5 855c1a0f5dbdffa5bf1d8907d591882a
SHA1 076d4face4ce724f820fe4b5a66c763f53f3cbe9
SHA512 54374cdb67453590018e6ddcefaeb0dabcd79041615c0b21ae8b65a39abd586fcd864052b8bf4563f13ffce0b36a1ddcddf9b3823e22ba44ef49010503b2575a
SSDEEP 49152:UbQyXmmfxtRhZ/9WBLzW2dNuRrnM9ILRvbLEb0g4fBKfKrbZsrDAdrQiF3n2/d0c:6Xm2bJgBdfGLEACfKhdrQU2/yk
TLSH
T112064A03F29900D8D05DD1B8CB568632EAB6BC850B35A2DF0790B7562E77EE86B7D710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0e594145.tmp

Path C:\Users\Admin\AppData\Local\Temp\0e594145.tmp
Size 64KB
SHA256 51e1e186ed030d1881f42798ed16ca542297139c203b2c213da93449fc2bcbb5
MD5 f7e8b7ad382f7b7c775afdfd2d5e2b3d
SHA1 c96e6382c8aa396b72cb9a489b70063f9a7ef71c
SHA512 576eed44cd3a90b69fc87e155c06da9b9e08300f0ac00b8db77599283dd19d8348252310cfd09a73403d25b60e32724a9630766ca094e480c2d5820f3aab770d
SSDEEP 768:WnLv0SpxeAidabHtydtZlNoF4Lv0SpxeAidabHtydtZlNoFS:WnAkZVr4AkZVrS
TLSH
T15453B60EDD8BA603F8918DB497A1E9DA8FFE9C233997B03FDF40450568B40488595EB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe

Path C:\Users\Admin\AppData\Local\Temp\2026-08-10_855c1a0f5dbdffa5bf1d8907d591882a_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Size 3.6MB
SHA256 1bd374552274a965c2f192280ac39f125e87b19367660a972707b57e8df7c425
MD5 08ff3bd38df16b17742f5ef67a07e719
SHA1 0e0b27bdc45c72fcb467d765209b22941cf3627b
SHA512 ab0cf29a651f2a121e2bd7cf2bc23281f96fa69536cec12e5bb1e3f8f611a83d41d91d0bcf28b1a3fa97283ca482a820cc17a93b1749a1611e44987b56c267e4
SSDEEP 49152:VbQyXmmfxtRhZ/9WBLzW2dNuRrnM9ILRvbLEb0g4fBKfKrbZsrDAdrQiF3n2/d0c:lXm2bJgBdfGLEACfKhdrQU2/yk
TLSH
T16F064A03F29900D8D05DD1B8CB568632EAB6BC850B35A2DF0790B7552E7BEE86B7D710
MD5 SHA1 SHA512 SSDEEP TLSH