Analysis
- user interaction
yes - max time kernel
20s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/07/2026, 04:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GL2020 Updater.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GL2020 Updater.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
General
- Target GL2020 Updater.exe
- Size 10KB
- Sample260706-e8256sdw2p
- SHA256 ec2eb4b3ee023fcc776dc04878edbed48d546073b63056bf693d4c0842e76325
- MD5 deddc893c4d6a5856bb060f50aa5fbad
- SHA1 f827c25786936ed37c4464049ec96993853d620f
- SHA512 c3983d18c665a9788425eec6496a0cea99b1cedd60af89b0d09cd75885bef5105f15bfac71636761386d520d839c4f1bb489735b4c2656e637d8770b8bf5d4bb
- SSDEEP 192:lpb//5Idhzj9CtTii9aNtQaQr+kEfsDAayTHVyUap5fiLV9qg:v//azG9aNtTkEffFwU8qVX
- TLSH T19122D70927DC8626EDBF2B7D5DB7160203B1FB66F823EB5E1888624E0D233145961B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5012 2888 WerFault.exe 78 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language GL2020 Updater.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\GL2020 Updater.exe"C:\Users\Admin\AppData\Local\Temp\GL2020 Updater.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2888 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2888 -s 9042⤵
- Program crash
PID:5012
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2888 -ip 28881⤵PID:4812