1d0eab6a3596d1c1e7674864e0fe12758371733735ee3c6a2260e9b2e043b399

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
30/03/2025, 18:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2025-03-30_b65424ffdb8d0bce3717fc2effa66914_black-basta_luca-stealer.exe
Size

833KB
MD5

b65424ffdb8d0bce3717fc2effa66914
SHA1

154eecde916117ec7e384ff8ef4e667817abea87
SHA256

1d0eab6a3596d1c1e7674864e0fe12758371733735ee3c6a2260e9b2e043b399
SHA512

8e0581b88cab340ef5c8b99d1a29ae477ba171760f786f95f4082777357808eacb8be054aa4081ac6eb2ef962a738d6eb28d8c19aaee77c286e247dbacf71ee2
SSDEEP

24576:R3oCTWeZPEfxnW9yFdNM+lu8n5bpGLIe1hdp1YdU:R3XTWsOBDNQ2iselZ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2025-03-30_b65424ffdb8d0bce3717fc2effa66914_black-basta_luca-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2025-03-30_b65424ffdb8d0bce3717fc2effa66914_black-basta_luca-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-30_b65424ffdb8d0bce3717fc2effa66914_black-basta_luca-stealer.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2576

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads