a6c7cf8c0f92f6bb5bf4c779c16d8bb676693ab0cf2c7f9c06922f6812dbe6f7

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 08:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-28_d334a46ec3a9014187861e06b0f244d1_cobalt-strike_elex_hawkeye_hijackloader_icedid_njrat_remcos_stop_vidar.exe
Size 3.9MB
Sample260828-j4cryavfpc
SHA256 a6c7cf8c0f92f6bb5bf4c779c16d8bb676693ab0cf2c7f9c06922f6812dbe6f7
MD5 d334a46ec3a9014187861e06b0f244d1
SHA1 cd8f2b0983e28b22c5fffb781dfbe6247672da0f
SHA512 d3c4785ec8ad0dc6bc9bb26d67af9cfa3134ea58f176f8b4bb72ae9ddd937fac7c82c9dfdf8868c3550a6b07900d0a552fd425db01f7215d2ac27ecb548f9c28
SSDEEP 49152:HXpiMD4p67pbYVBXdcJDd79WCBXpiM+VBXdcXVBXdcn:3pic7pcdSp7HpihdSdI
TLSH
T14B165B0273E48075F1B36B359AB65635DA7ABC215E31D34F1398C61D0E72A90EE39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-28_d334a46ec3a9014187861e06b0f244d1_cobalt-strike_elex_hawkeye_hijackloader_icedid_njrat_remcos_stop_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-28_d334a46ec3a9014187861e06b0f244d1_cobalt-strike_elex_hawkeye_hijackloader_icedid_njrat_remcos_stop_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-28_d334a46ec3a9014187861e06b0f244d1_cobalt-strike_elex_hawkeye_hijackloader_icedid_njrat_remcos_stop_vidar.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

integrator.exe-

Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe-
Size 10.5MB
SHA256 101fad26688c83fc5ae68c1fb07d81317596ec99f95e197e576b7661e5adfcae
MD5 84422113d8f1a6e22e9817a8ee37c846
SHA1 d0e80d8b5a85d1b55f79c39eb05f082717a137b6
SHA512 26c89b9dd205a621ed21b24ece3b2375a96064073202cf20a47eee4e14109badfeefa34ea846a2959aeebe5e10ab48321511f15418c57fdf875e9f138f1c80f7
SSDEEP 98304:3pic7pcdSp7HpihdSdzzbnbTWpz1T5mFB1GWdhrrmqJjeb2r:SdQOdSdzzzbqvT5wUWd5Szy
TLSH
T193B64A1A6BF481E8E1BB92348D778771F6767C518E32A60F03A1C61E1F33A549D29732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/6092-7-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/6092-8-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/6092-12-0x0000000000400000-0x000000000040E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads