Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
General
- Target .exe
- Size 18.7MB
- Sample260623-pc7e5acv8p
- SHA256 b349fac8cb7fcdd46e150af534d254a06c967dfd5c90770bd043e9f074d0be9c
- MD5 6d512762a4d88eb064c5ea6922ef1c83
- SHA1 c8a3fc033495d66a9eb47eeb6964e41ac213bf69
- SHA512 08b93c814143a2f88bf45b1a61b5a963a36387b9e8a94cf13706cc5ee2fdbb2a47a96e05b2a5659d80f693abbf76c0fa1a804cf399135bf9315def04de0dd1e0
- SSDEEP 393216:E4jtwfw7NKDzKibPhf0Rx09+7NNoULJmEeis20Y8eCzzsSfL6o:Er4kDmibPxlokEKVYyzoSf7
- TLSH T1D9172312BBE18476C5971A308D1B97F96279BF054E209C977BD07F0D6F31A81F2292CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5784 3388 WerFault.exe 87 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language .exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\.exe"C:\Users\Admin\AppData\Local\Temp\.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3388 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3388 -s 6922⤵
- Program crash
PID:5784
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 244 -p 3388 -ip 33881⤵PID:696