b6cdca892192f35f4df298ab65632f398ed1ad8c9fd469fd5555a549688e95e8

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_35f8ac6c5bcb57443b5edbcf2e0c6ec0_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
Size 7.0MB
Sample260804-pnqazsen71
SHA256 b6cdca892192f35f4df298ab65632f398ed1ad8c9fd469fd5555a549688e95e8
MD5 35f8ac6c5bcb57443b5edbcf2e0c6ec0
SHA1 8c85539714899928183d619c3e2be35715a125ab
SHA512 eafd2e67461b71391c9a85e68b0107e7b500b0d12e1b905ee9911638d09c665c592e537985c4cc5fdb5e8a7b376da18335bd31b8f4f8f66dc337264b430d7b4a
SSDEEP 98304:FoKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TUvyerf:KquFIF0wuPlCKrjR
TLSH
T1EF769E0273D84475F5B316319A3592695A3ABCA58F33CA9F328C2D5E6FB16C08A35733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-03_35f8ac6c5bcb57443b5edbcf2e0c6ec0_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_35f8ac6c5bcb57443b5edbcf2e0c6ec0_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_35f8ac6c5bcb57443b5edbcf2e0c6ec0_agent-tesla_amadey_avoslocker_blankgrabber_cobalt-strike.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads