20df13465b09ad3fabf707cdc3b370864ad0fe7e7ba550abb8b96cbd347283bf

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 07:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cudatext/cudatext.exe
Size

6.6MB
MD5

2c6ccad791db492c48377580b7809281
SHA1

6164150b8ea446ae4e81d6f9e94ff97dad7cbf18
SHA256

5cb597a65f876506c9e125c58f5113fd62bb1b17e27c9410f908400403b3af8e
SHA512

aeb751b2afcc592540275a63c67aa72ae5f3bb3288d8cc125663304b507cf48d2e228e0b40966eb61699363261c5a90d46774b6e30f48cd2627fd49c4983d80f
SSDEEP

196608:7mhM4S2V7xWXWmW04LnF79OZg3ouWtOGFKsmZyBbhT:ShTS2V7xWXWmWR9OZg4ptOGFA49T

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cudatext.exe

C:\Users\Admin\AppData\Local\Temp\cudatext\cudatext.exe
"C:\Users\Admin\AppData\Local\Temp\cudatext\cudatext.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\cudatext\settings\history.json

Filesize
686B

MD5
d7a8f75629e1c92c95c794dfb7b92710

SHA1
5a297cf21062df01df08a5d18d85feaf28d09508

SHA256
5bf09d33ad7285bf88b9d1d2a6e1ed1872cd4faf8eca5991ff65d6625e668c5b

SHA512
11a500be50931da87de30c6bd421e4c36126430dcc5a7b1be4f32c867de3e9058f1839095b1acc1ab1ba3a9a69a4f4f980350d64fa484b24a80735f93139a511

Download Submit