14007b6fb425d03035a2a54dd71e3044c2b9601ff35dd2cc27b7dac8c5b7f63e

max time kernel
598s
max time network
376s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/06/2026, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
capa-testfiles-master/0cd2b334aede270b14868db28211cde3.exe
Size 309KB
Sample260625-sbpepsc15l
SHA256 14007b6fb425d03035a2a54dd71e3044c2b9601ff35dd2cc27b7dac8c5b7f63e
MD5 0cd2b334aede270b14868db28211cde3
SHA1 9fed14185555b88ad1143f21a72c31f13d5c6585
SHA512 e71d3024298ddd33888f50e2fbfae76554e35a9833e93d58d3cef10a93f0d6710d2a5a75c4be3379820a8f15db8c7623665b273bb55098dc82c297ca3d769e13
SSDEEP 6144:kqiXkef4AwgirXPE905n+WFZB5ekLpskEsbywiQb0Xc:cXkeFwgiI9yfDeMskELw1ac
TLSH
T17064D0A6CC9280D1CD4984FDD1268DEEB5958C5CC1229D32B74F8F1D8BACBBD2186877
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3688	0cd2b334aede270b14868db28211cde3.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0cd2b334aede270b14868db28211cde3.exe

C:\Users\Admin\AppData\Local\Temp\capa-testfiles-master\0cd2b334aede270b14868db28211cde3.exe
"C:\Users\Admin\AppData\Local\Temp\capa-testfiles-master\0cd2b334aede270b14868db28211cde3.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3688

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4b0 0x324
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bassmod.dll

Path C:\Users\Admin\AppData\Local\Temp\bassmod.dll
Size 9KB
SHA256 844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2
MD5 780d14604d49e3c634200c523def8351
SHA1 e208ef6f421d2260070a9222f1f918f1de0a8eeb
SHA512 a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b
SSDEEP 192:Yjtr1Et860Vu6tAo2j+feMnkqtDXuulsa7k0yRlm7/Pdl:AtU8Zu6K+feJCuwsL00la/Pd
TLSH
T19D127C8596D008B2C16E2070DAD579ADA77B75E00AC9EF436ED309A48CCEF63DC8C706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3688-0-0x0000000000400000-0x0000000000537512-memory.dmp

Download

memory/3688-1-0x0000000000400000-0x0000000000537512-memory.dmp

Download

memory/3688-3-0x0000000000400000-0x0000000000537512-memory.dmp

Download

memory/3688-2-0x0000000000401000-0x0000000000405000-memory.dmp

Download

memory/3688-9-0x0000000000400000-0x0000000000537512-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads