da6ea25797a638b2cc393690db6f1466e9edddab39f969d917a13e9075af997a

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 18:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-08_2f5d1106e67b6f05ca3dbb89dfb67ef8_amadey_elex_emotet_smoke-loader_stop.exe
Size 796KB
Sample261009-wnk5lasz8j
SHA256 da6ea25797a638b2cc393690db6f1466e9edddab39f969d917a13e9075af997a
MD5 2f5d1106e67b6f05ca3dbb89dfb67ef8
SHA1 3276ba547755201f48b9f3e4b58adb5cb3488f7b
SHA512 0f94a75b934e67c0954a58f9c602a98504d0dd873c27383eea17823678579665a058022c85eb5ac26cec22a6d19bc9c63d9ea6bccd9268ec7b56eada8a5dd84b
SSDEEP 3072:HP56UHYHkU7Yf7fiBzY646VNmSZ3m3bhzPxCbplQcPDtJh+sCEQwr73gRdZRCt/q:HPl7jfAzY63VNm83KdAbpGqDBgZ6MJnZ
TLSH
T1B8057C233AD1C833D5A601760CD78A7A62B6BC115B3596CB3BD07F4D5EB07D26A3A306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-08_2f5d1106e67b6f05ca3dbb89dfb67ef8_amadey_elex_emotet_smoke-loader_stop.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3108	2026-10-08_2f5d1106e67b6f05ca3dbb89dfb67ef8_amadey_elex_emotet_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-08_2f5d1106e67b6f05ca3dbb89dfb67ef8_amadey_elex_emotet_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-08_2f5d1106e67b6f05ca3dbb89dfb67ef8_amadey_elex_emotet_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PrinterInstall.log

Path C:\Windows\Temp\PrinterInstall.log
Size 1KB
SHA256 52e6820b7a06cdcf0891dca4ad27781f47a2faabdcdb88ca20d46ddadf377557
MD5 335d4743a1642d913b1bb0c6433af815
SHA1 6eb959cc56f2b62326b7009bc807cf3ed6071138
SHA512 f30a12f741daebecc90e38a309d2d59bc59fc817c860624914f514ce11f779220316dfba62bf03c81c45fecfd4b1399a3cd01e28e088f7b9f09b87011d93937d
TLSH
T141212943F32888DC1A68766E187DABC7A6134EADC822F97C364DC2003FA439E3197750
MD5 SHA1 SHA512 TLSH

Submit Download

PrinterInstall.log

Path C:\Windows\Temp\PrinterInstall.log
Size 1KB
SHA256 c8e6ae24cbf2c53b60ec56c711534022bbe09e1f093bc1818ad42a1837510d38
MD5 b1565c2d7ec2eb6b4d372616d8a65841
SHA1 166de5229cc33be77953bb655d225cde93719869
SHA512 69b335354c3116a8d84ecb1e0d849329863bd2e9564fb1129332b176299442c03b76c228f80515b69fab213bc3d99bd07eb159961b57b23be268616aff9a05e2
TLSH
T18C417E43F36C48DC1A28BA6E183DABC7A6134D9E8822F6783A09C6043E6429F3597750
MD5 SHA1 SHA512 TLSH

Submit Download

PrinterInstall.log

Path C:\Windows\Temp\PrinterInstall.log
Size 620B
SHA256 ecd198a07bf46ed604312700e14e39d44e235ba33a4e3afcc910a36ef1285bf2
MD5 d8f61488fc4e5947940f8005c63aa345
SHA1 21de3a2be9746d01e9edc2f340b67543318fbe77
SHA512 ffb86790eefbe2d042036dd387da3ddafb2b5814afca2a790b8fc7fc1329b25b6d3df705481c839af24eb37b93a0826fe6cc0a7ff289bb06d5f06ae1a78db0ee
TLSH
T123F02842F3A888DC1934756A683DA7DAA1134EAD8933F6782601C6543C2835F35C3B90
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3108-0-0x0000000000400000-0x00000000004CB000-memory.dmp

Download

memory/3108-25-0x0000000000400000-0x00000000004CB000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads