47db332c7bfd9bfd81c2b1508da27fe4dfcb2e0728e6849fb58e12039a161d90

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-16_f688a745c8e284b1db674098d909aeab_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Size 1.6MB
Sample260816-pmkdcadc29
SHA256 47db332c7bfd9bfd81c2b1508da27fe4dfcb2e0728e6849fb58e12039a161d90
MD5 f688a745c8e284b1db674098d909aeab
SHA1 c3effdc9fe679285538e75483ecef181d0101cc0
SHA512 e07c4dcb3e17dc91f1f2e8202c0a9277ee076325d718f506802174e0c327a94097fb05d428bc697c60dcaa60cc313015646bb8b41da647ef21cc27713d308695
SSDEEP 24576:mojsqiZaiTPe2qSYTqMi8CtBd2QHCHmTBW5MMD5TvinrmbjYTqMi8CtBd2QHCHmq:ZqJtb2IU56rhqJtb2I
TLSH
T120751925F6688B21D07BC079C5D2969AEA333C425F308BCB12469B6C3E276D5D936733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-16_f688a745c8e284b1db674098d909aeab_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-16_f688a745c8e284b1db674098d909aeab_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_f688a745c8e284b1db674098d909aeab_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads