ddc3a40d02788077e0c8f35b6006c13d063cf83b1c62ab829ac9f1dec4c37000

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 04:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play.exe
Size 83KB
Sample260930-fgxbaat19l
SHA256 ddc3a40d02788077e0c8f35b6006c13d063cf83b1c62ab829ac9f1dec4c37000
MD5 1ad27bc149094da716528a5cb20d27fb
SHA1 86e98f500d9d065af7637131fb29790cb5bc3cb5
SHA512 4795c42211e24e46bb8706954baf4a20b3de7550c9ace5ffbca37dc1e5a7e5fdc2ddb5958a533350fd2296cc91ad4f9edd2ac34f3fbbc904713329eb4093340f
SSDEEP 1536:iBZUj3nCsjvHhXmiT9Y2yWkjar0P1EMYSXzHvsWUJDocdFgJbvnPH:Lrn5jvHhX3yWkjar0P1XDKHFgJbvPH
TLSH
T157835A53B5C194B1E5720A324864EAA59A3FFC205F61DEAB3785263E0F301D18D36DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads