7712ab8adcbcd385b5187a58f41b52d33a5eec0af9d22a4a6b1125295926b540

Analysis

max time kernel
150s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-12_66e3480ff951059d25f77eab5d2f6c42_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
Size 12.5MB
Sample260813-bc36taydmc
SHA256 7712ab8adcbcd385b5187a58f41b52d33a5eec0af9d22a4a6b1125295926b540
MD5 66e3480ff951059d25f77eab5d2f6c42
SHA1 5366156d5c4abd8f14a84011b1e8aaaa05c60779
SHA512 45845d948f1e8e84275e45e2425162a3970bc4c948862f83fbd5e6e2fdbb03323ab5a14fdef17ff577eb23a76da86eec6a18c8487fc281b5fb9e0d06f25731bb
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA91pH2WpjHrgBFFu416AWqpi7pisA91pH2WpjHrg4pU:tjDdTdMmHpn6F44IAWXmHpnb7dM
TLSH
T11CD65C5163EA50F8E1BBD2358A358732E6B67C134930934F13A8DA5A2F73650AD39733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-12_66e3480ff951059d25f77eab5d2f6c42_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_66e3480ff951059d25f77eab5d2f6c42_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_66e3480ff951059d25f77eab5d2f6c42_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 19.1MB
SHA256 62aea31c504820eba93f1c87fae59fb58260ab5a25981781409a2c0168a6796d
MD5 116a4ffbdc6b0ed37668e502d79f41db
SHA1 aa34fc6404658693c5dda3c82b0aec1d946adc41
SHA512 ea5177bdb6ea8dc27383cd9d1a073975858579c21ed205fcbcdd25c39367c4d9cdefe95c01139ad75a2608af353e623f15611118b9f1c1d2e360ddd213780802
SSDEEP 196608:tjDdTdMmHpn6F44IAWXmHpnb7dPzzbqvT5wUWd5SzJ:tYmHN6+JrXmHNpnbG9wUWdKJ
TLSH
T152175C5567E590F8E1BBD1348E768732E6B67C124931A30F03B8CA1A2F73A549D29733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3788-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/3788-13-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/3788-16-0x0000000000400000-0x000000000040E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads