dfd8d3ecdb7b19a81e4d863c3c5e5def70d96369590daf7360ca430bb95ff1ea

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 07:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-23_643071f39e1aa479b05cdbb15b11f682_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Size 819KB
Sample260924-jbe2la1akg
SHA256 dfd8d3ecdb7b19a81e4d863c3c5e5def70d96369590daf7360ca430bb95ff1ea
MD5 643071f39e1aa479b05cdbb15b11f682
SHA1 ced178a6763bbcc492580112fc653166faed1042
SHA512 632d9693cb13de23db7b7187128fa69c9bb9305f8825b3230e1f16dd48ca7ba830fb5accc287e475a509bf93f3213ba7b0573098963c829d9e9999ab114ee68f
SSDEEP 12288:0aY+FUBAaBKaplw9U+qMi8CtdVldusIh6BBHCHrKZXCktSzIzWpX5:0D+qBAaBhYTqMi8CtBd2QHCHmTBW5
TLSH
T11E053B35F664C736E073C075C9E2AAAEED3234415B3089CB5289C76C2E676D2D936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-23_643071f39e1aa479b05cdbb15b11f682_amadey_cobalt-strike_elex_hijackloader_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_643071f39e1aa479b05cdbb15b11f682_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_643071f39e1aa479b05cdbb15b11f682_amadey_cobalt-strike_elex_hijackloader_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads