ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25.exe
Size 723KB
Sample260731-16kzrsscrd
SHA256 ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25
MD5 10e3b9eda6269bbca192f78b3c7f1fa3
SHA1 2a2d383fc56e464be19959e71f4407368b2c29ba
SHA512 9bc02ceea30e628a727a29d29b3ffcd82eb0455014f99f62af925fa0fbc138ca51754ba6720eea113d27776789d01ef0e0d881415e2574b5a9294d4f217c321f
SSDEEP 12288:EFAbOI3stnsPY1AxagvSV2xNj/3jb9mg/cxIWRV/Tucqlcjqo:ksstsPY1sZSV27zbsAcxxucqlcL
TLSH
T1BCF4AE2139E2C076D2732130485DD358A67AF4724A3A49A7BBCC376E2F245C1DF25BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2416	1264	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25.exe

C:\Users\Admin\AppData\Local\Temp\ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25.exe
"C:\Users\Admin\AppData\Local\Temp\ef6069bacdb217443ad5daf757981a88ceca85917301df1bde1c51b1c4d48f25.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1264
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1264 -s 560
  2⤵
  - Program crash
  PID:2416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1264 -ip 1264
1⤵
PID:772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads