8bc13b3aa51b0d3319d95522b7d2a69bd71ebfb2f82f3d6bda21f4795e29c98c

Analysis

max time kernel
899s
max time network
434s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
out.exe
Size 107KB
Sample260810-18213aaq4z
SHA256 8bc13b3aa51b0d3319d95522b7d2a69bd71ebfb2f82f3d6bda21f4795e29c98c
MD5 67dd0b0e5b4f87b6e6f42f6613276bdc
SHA1 ef645037d5750c1326bedf17f91cd33d74d9bc13
SHA512 804fe00b8dfed61a8c8ca29dc91f044c73fae530b0cb22954c7b2251d35cf36c3ed42a8a1f9f48c70feb4c2db583f4c053854f4c59ef1a167b362fee9fe27a98
SSDEEP 1536:wMfmENAW7MzCwMcLJvqOeocZIpxD2r3iiB2VZlzywOv1uevjfTQFq:wMfmVWAzdLJSWpUrVKGJNuebiq
TLSH
T196B36C1031C1C432E26725358EB9C7AACA6AFCB14F3168CB7BD8067E4F696D19A34357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5048	2340	WerFault.exe	81

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	out.exe

C:\Users\Admin\AppData\Local\Temp\out.exe
"C:\Users\Admin\AppData\Local\Temp\out.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2340 -s 240
  2⤵
  - Program crash
  PID:5048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2340 -ip 2340
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads