Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system -
submitted
26/03/2025, 09:32
Behavioral task
behavioral1
Sample
2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
-
Size
572KB
-
MD5
03bc75d0013c1bce3fddb5903f632254
-
SHA1
bfece3bf7345d0c4ddd9bc9ad4598e0afe335af8
-
SHA256
5318b8e19f17f3b4c1866725812f14c08511ad492f692a766031c83bc8db08cb
-
SHA512
482551d0b8caf8f10fb013e5392b55c7ec2dca86897fb896956ca4d3b713b683787c2f1ea895b20cf853eb3508f2aa193bf6343bac3f6f5633c1891ea093a608
-
SSDEEP
12288:RkwLfZCjKxel9IMV3HMpECv4zS8AVFcEHpEaixnzuwLJls3IVOplrEvfwUB6N:RrfZc9RRMOc4zYBMQCwrEQUB6N
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-26_03bc75d0013c1bce3fddb5903f632254_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2348