9d2bab539ce736a94cf3abf518c74b5232366e19121b45540bc0253c7bf8e947

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 04:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_61cfecd0b8077885a6b217de4562aa28_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
Size 3.7MB
Sample260810-fe873a1flg
SHA256 9d2bab539ce736a94cf3abf518c74b5232366e19121b45540bc0253c7bf8e947
MD5 61cfecd0b8077885a6b217de4562aa28
SHA1 ce7fd78feff5310570052d29e684501edced1e1a
SHA512 fc43524e4192807ad9ce66a400ccfd80808241bb569f26b23ab6139de1bf82fb5ec47931316e481612cd7bf3158904c53b93e1065c02c7d9b6a32e993031cc03
SSDEEP 49152:KbQyXmmfxtRhZ/9WBLzW2dNuRrnM9ILRvbLEb0g4fBKfKrbZsrDAdrQiF3n2/d0c:YXm2bJgBdfGLEACfKhdrQU2/yk
TLSH
T1B6064A03F29900D8D05DD1B8CB568632EAB6BC850B35A2DF0790B7562E77EE86B7D710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_61cfecd0b8077885a6b217de4562aa28_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_61cfecd0b8077885a6b217de4562aa28_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_61cfecd0b8077885a6b217de4562aa28_cobalt-strike_elex_glassworm_icedid_njrat_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0e59cb55.tmp

Path C:\Users\Admin\AppData\Local\Temp\0e59cb55.tmp
Size 64KB
SHA256 67119e5ed58a7adf3ad5cd781588676481edb1b602ea55bf634df76f009616c8
MD5 876c45cf6eed2d31d5b6ec656dfb0ad5
SHA1 9097105a7fea2ab7aeaa2a027973583d596e221e
SHA512 9337fb5a3f99337f3ac676830cc76a74947e27d9356c74fe1fa6dfbeeffaa020cbf8ab8b586459a8d60b98ab42e1e896e8b207e8b4f994136dc3c321da5b9d90
SSDEEP 768:WnLv0SpxeAidabHtydtZlNoj4Lv0SpxeAidabHtydtZlNoj7S:WnAkZV94AkZVtS
TLSH
T13E53B60EDD8BA603F8918DB497A1E9DA8FFE9C233997B03FDF40450568B40488595EB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download