e6c379eda74bb8b69f1f2a9997289c04186fe29f1128ff4239f913bad1b9d063

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04-09-2024 13:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

20240904b3c99730a5507022a233b48c94eec8c4avoslockercobaltstrikeraccoonstealer.exe
Size

573KB
MD5

b3c99730a5507022a233b48c94eec8c4
SHA1

bbc6737bea550b557cda4db3d2a14cfe60b831a8
SHA256

e6c379eda74bb8b69f1f2a9997289c04186fe29f1128ff4239f913bad1b9d063
SHA512

fb4bf57ecd8abf158d1f4ae098fd893e191a8aad7225bc2f2b62086ec7c24655212c5ca8db1cf11ee8aef67ced1a60db280303f22412c5ba2430fab785d3c09d
SSDEEP

12288:D5ntsDk51T1v2AqWsmCsWZC6cm3mS5Osw4KT5uImXzsMAi8rh5Qm6f:dntso1T1v2AVZXWZZqRzlDI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	20240904b3c99730a5507022a233b48c94eec8c4avoslockercobaltstrikeraccoonstealer.exe

C:\Users\Admin\AppData\Local\Temp\20240904b3c99730a5507022a233b48c94eec8c4avoslockercobaltstrikeraccoonstealer.exe
"C:\Users\Admin\AppData\Local\Temp\20240904b3c99730a5507022a233b48c94eec8c4avoslockercobaltstrikeraccoonstealer.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4372,i,3239535018877284530,3457823197501312703,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads