279f85cf6a05d056c32a943d182ee1d5b9a215d63f54ab3416b2ffae23a5a030

Analysis

max time kernel
93s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2024 17:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

20240924e17464b5f48e8f6b7492b7b77b1c2cf0cobaltstrikecobaltstrikepoetratsnatch.exe
Size

5.1MB
MD5

e17464b5f48e8f6b7492b7b77b1c2cf0
SHA1

76b0d9f8af264d424e2f4328e0eba1c340abc2aa
SHA256

279f85cf6a05d056c32a943d182ee1d5b9a215d63f54ab3416b2ffae23a5a030
SHA512

50e4a35813a9080add3b3c4cc316b10b168af7164bc514ed4bcb3ac8eaf21b1532af4ebd2d5c34a80e6a9711dcdae6706ff1dca0a42fa47d93fd02fd59752af8
SSDEEP

49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2v2V6liK1uOCeXvpn7:r56utgpPFotBER/mQ32lU1

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	20240924e17464b5f48e8f6b7492b7b77b1c2cf0cobaltstrikecobaltstrikepoetratsnatch.exe

C:\Users\Admin\AppData\Local\Temp\20240924e17464b5f48e8f6b7492b7b77b1c2cf0cobaltstrikecobaltstrikepoetratsnatch.exe
"C:\Users\Admin\AppData\Local\Temp\20240924e17464b5f48e8f6b7492b7b77b1c2cf0cobaltstrikecobaltstrikepoetratsnatch.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads