bff8c4cb77dfd396945b17eca50a36ea1277b3485c7ab5614e04ffb264c5fcf1

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-16_5d60f16724d9af5e89c250a9f93220fc_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
Size 6.1MB
Sample260816-e4j4ssdj3t
SHA256 bff8c4cb77dfd396945b17eca50a36ea1277b3485c7ab5614e04ffb264c5fcf1
MD5 5d60f16724d9af5e89c250a9f93220fc
SHA1 44fa3df65841407d106431f790ac7322f862a13c
SHA512 b1d78a2af2f526657278049b74b958503e94dff2b376c8a73eb60a3c1f92b385ef83df87ef4f0212edf0164509c21439329dc49fa1dc561b3acdd4736891a43f
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA9zpinp78piUdR+4jW:tjDdTdMT6d9jW
TLSH
T175565A0273E48575F1B757319E7982719A7BBC218E34C38F2394DA1D2E71690EA39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-16_5d60f16724d9af5e89c250a9f93220fc_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-16_5d60f16724d9af5e89c250a9f93220fc_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_5d60f16724d9af5e89c250a9f93220fc_amadey_cobalt-strike_elex_hawkeye_hijackloader_icedid_lu.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 12.7MB
SHA256 1e2ce442f5800eb4e89934c20eb604dcd7e85375e3b50a9e232aba9f7b853e9f
MD5 b9321beb799a2d4d206abd345cd9ab95
SHA1 18be1b19dce8fe49216b222f5b2ab9564f4b3434
SHA512 c62be9cc47982caabf47536a602c0424c6c13e73c7b44ee7423dd7cf6d71f359e38f2b3a4f676d568839ae3d93d9830cb353fa70e9d65c179c5051c31922670d
SSDEEP 98304:3piqpiu7pH+4jDdTdqpiwA9zpinp78piUdR+4jVzbnbTWpz1T5mFB1GWdhrrmqJa:tjDdTdMT6d9jVzzbqvT5wUWd5SzD
TLSH
T1ACD64B1567E481F9E1BB92348E768771E6767C118E32974F03A0CA1E2E33A949D39733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2764-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/2764-8-0x0000000000400000-0x000000000040E000-memory.dmp