77c678df12411c3d7cc67c2971be72913df85cafd05e5bd78c1b8cf84b508301

Analysis

user interaction
yes
max time kernel
131s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 17:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HystericBirthday.exe
Size 4.1MB
Sample260802-vja86axcja
SHA256 77c678df12411c3d7cc67c2971be72913df85cafd05e5bd78c1b8cf84b508301
MD5 4c1a3beaf60944ba1f42613374064ac1
SHA1 bbc8ab62d3f42e6aa0c68d6934c3ae21a31ff972
SHA512 ac55fc87985082e229b77d6ed09ae3d48c4c1e123f0ee27bcadd01a4f967d0960237223a657925e826073b17be884c9be1345447b7795e5791cc8e154e78b893
SSDEEP 49152:N7FkW6Zril0QLZxU+UdmaYsBRmUVh+ilpST26Tc346Ez0tuHIBpwP218MBSHItuL:N7FkWstQNxU+U4aYsBRmKZ4Y3gLR
TLSH
T16D1619FC7140A657F0C404B16BE9EA90A9663DA98B35179329933FF61470EB676E3303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5756	5864	WerFault.exe	84

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HystericBirthday.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5864	HystericBirthday.exe
5864	HystericBirthday.exe

C:\Users\Admin\AppData\Local\Temp\HystericBirthday.exe
"C:\Users\Admin\AppData\Local\Temp\HystericBirthday.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5864
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5864 -s 18220
  2⤵
  - Program crash
  PID:5756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5864 -ip 5864
1⤵
PID:5736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

corpseparty2u.ini

Path C:\Users\Admin\AppData\Local\Temp\corpseparty2u.ini
Size 1KB
SHA256 02a3ba54ee7c3032b0c6c3fee492b1ae50c88e61ba81329c99897c0c31d0fc04
MD5 58799567d139e291f1934df1ee13cc20
SHA1 d2edf07050748a5ead21e8076956be0ff07596c1
SHA512 ea4e298ae345034babbbd3c3195628d92ef2052d99dc48d9fe8d6f92fbfaf3c25d73655a8515bc827909c519cb4956e22a9f830b4c327e5d31f2b47d6ad942a8
TLSH
T1C0216D3D857CAA2E495FA3F55CE6458218FEB2444C0336D1CE0956F79E890861778723
MD5 SHA1 SHA512 TLSH

Submit Download

corpseparty2u.ini

Path C:\Users\Admin\AppData\Local\Temp\corpseparty2u.ini
Size 230B
SHA256 00ca754e6d337d9a9727a47c3e173fc806a57dbf4478db07644a12ae4ec28d5b
MD5 ffd16e043e2f016bb9f65c440de4c5fd
SHA1 08f802518a49ca88d9f56229bf478b9488843842
SHA512 3da23a20d005bff8f84e514444187aaa18417ca4f6a4c4482050e35ddf21dd3cefc9a1c22490b1648a66427b3a3a913b6451006578b60410ef142b45eb783f0e
TLSH
T132D097358422033A6032E0AAB02FCB4218F8C1140C20B2629B433AAEAF96242238C950
MD5 SHA1 SHA512 TLSH

Submit Download

corpseparty2u.ini

Path C:\Users\Admin\AppData\Local\Temp\corpseparty2u.ini
Size 1KB
SHA256 f56b0c27a07d262f869dfeb3e1c4eb8e783826230abdbf867e0621967895f660
MD5 5296d936fbce221c5494d147c05fcedb
SHA1 0fb279b4f806377ef862379cd9a4a5fb1f20b07b
SHA512 2a220db79d9de94e6b7f761976093b48342e1c4af75d9cd0c8f408eda3f0603cfa9c121d44a73e796e02df2f1508f24087c3453c7c2808c4c38c6d1e6bec428d
TLSH
T127216D3D857CAB2E495FA3F55CE6458218FEB2444C0336D1CE0956F79E890861778723
MD5 SHA1 SHA512 TLSH

Submit Download

corpseparty2u.ini

Path C:\Users\Admin\AppData\Local\Temp\corpseparty2u.ini
Size 1KB
SHA256 a1a5c1e4cd7e46c08f5d2d84b51e8abd00c9b74c8fd901a53012cdb4ba96b35f
MD5 64ddf085b147c0ddff80f4dfe882cf84
SHA1 5608000bcd1a6fc4360e302ccd0fb49ffbe921b3
SHA512 c6e205c28b802470b24607da7221585c96471972e9dcd2dbb78a30f5382b24a56508ff3470d4738073f924f6873d57f7d33e8d9de7a356ec9d1aeccc1717d54f
TLSH
T154119B3E817CEA2E495EA3F65CE646821CFEA1544D023991CE0955F79E890872768B23
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads