0f3e7aaa877f8b5671a0282dcf8948aea969e18fd3d1f3fb627e62b4dbd80aa3

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 00:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-10_ff4d11a96f8a6db12c5df83ed501941c_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
Size 11.8MB
Sample260811-a3x7tabe96
SHA256 0f3e7aaa877f8b5671a0282dcf8948aea969e18fd3d1f3fb627e62b4dbd80aa3
MD5 ff4d11a96f8a6db12c5df83ed501941c
SHA1 17b9fedc84f11a482c0d4d3ed9f207001f6edd2a
SHA512 3365f5d44c9c8281733f940d8b5f52a7369e981552a547f24edc478cc97eaa0422747567f944f1118cae05940ceaade449a11eccb9b5478469dad5fec033c029
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA91pH2WpjHrgBFFu416AWqpi7pisA91pH2WpLpiHp7j:tjDdTdMmHpn6F44IAWXmHpQWj4
TLSH
T16DC65C5162E650F8E1BB91358A398732E6B67C134D30934F13ACDA5A2F73650AD39B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-10_ff4d11a96f8a6db12c5df83ed501941c_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_ff4d11a96f8a6db12c5df83ed501941c_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_ff4d11a96f8a6db12c5df83ed501941c_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 18.4MB
SHA256 923b3bc8676f8ef4d80a02a264c112ca7e7ec9aa26f16c1e21d397e9b08894ae
MD5 0901ea2f8382d98f066b3bfb1114eeba
SHA1 5e72509656f2121072bfce28130e21f4c119e422
SHA512 8ab43dde76521363007ad65ef7c3b7baaa9ea6a53219e29e4da50189fba7e98af3bce4cc531a9ad9ce8f11976502a9db7a93a85993d75136eb92b81fe8203797
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpQWjjzzbqvT5wUWd5Szn:tYmHN6+JrXmHJfnbG9wUWdKn
TLSH
T144175B5566E591F8E0BBD1348E368732E6767C124E32934F03B8CA1A2F73A549D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4564-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4564-9-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4564-11-0x0000000000400000-0x000000000040E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads