Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 23:21
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
- Size 22.2MB
- Sample260802-3cc36shc36
- SHA256 c86ed1028c8114489438d21e04d3049670b2323b00d6f9f22a869cb2fcee0b0b
- MD5 f974f8c0f57d3b2c4f466c96066bb54b
- SHA1 bc5355624649fc237d1ff2eae10c33376cc87f7b
- SHA512 eaead54d6456965d1e9addc3e40557e003b4e148569e75bfad7e19cd052e9647765421042afe32bee3e8871aa5d4e3a84f68fc8dfc7b5e16d553725ec2531f15
- SSDEEP 196608:/TObquFIF0wuPlCKrjRVTObquFIF0wuPlCKrjRVTObquFIF0wuPlCKrjRVTO:/VoUm7VoUm7VoUm7
- TLSH T15E37AE0273D85875F1B316319A3592655A3DBCA58E32C98F32883E5D7F706C1AA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-02_f974f8c0f57d3b2c4f466c96066bb54b_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4864