4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 08:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3.exe
Size 2.3MB
Sample260814-kvzqsage67
SHA256 4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3
MD5 cf0c9a27400473c9a6d77cb836d3e731
SHA1 b801258cca745256c2f065574a116c7d2d3eae50
SHA512 78bb49aa4fa11d0150a8fa6bc7f1dafb98f3772f490a71ea2b1b4c6a7c9d9a81a1e4d58dc5a28c3d4336aecc9f9b3bd65ae829f3a38de637b2949b2d10d9a340
SSDEEP 24576:tWjWUl+viHmR4hVBCH8J+bYe/OamMRL53j5s01ZZWXWuK2uSXvEOeh4Da6fd4xcJ:gjxltH1iLtdRZZwWj2hEOUMhVOcJ
TLSH
T154B5E042F9830083F7D365B02B3AD9A5D4296AB3BB181CCB4058819495FDDDF96B363B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5688	4972	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3.exe

C:\Users\Admin\AppData\Local\Temp\4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3.exe
"C:\Users\Admin\AppData\Local\Temp\4c085cb79516494946428cc4466f0df1b55caeb3c394a78c6af735231b1288d3.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 164
  2⤵
  - Program crash
  PID:5688

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4972 -ip 4972
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads