0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 17:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2.exe
Size 794KB
Sample260814-we2e8afk7x
SHA256 0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2
MD5 75386bfcd9a6dc02fc1a2775a0e2201e
SHA1 6467f630f3724331c8aeda7697d67b2b9d3514f2
SHA512 87182b7ad24d28febb63d921672773c6a8212e33de806d0e7cff58fc6baa4643996de9be9001f2d63d3ac496890c1a42593211157785b233de6683f5151a8b48
SSDEEP 12288:YnrePWUGdJzhc+goKITpz/bSePLQiEBltsVy6Wy4S3:YrCWUGy+gITpj2E7s0VyxyJ
TLSH
T15B05AEE5795E7ABBC00A1CBA8E568E6274EC57B187504C93FFD53EBA4910CC31623932
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3468	3332	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2.exe

C:\Users\Admin\AppData\Local\Temp\0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2.exe
"C:\Users\Admin\AppData\Local\Temp\0b933c4a7b5b95facd28aafce01f83aab9c63cce0f0fca6d7ade8dae746b07f2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3332
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 412
  2⤵
  - Program crash
  PID:3468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3332 -ip 3332
1⤵
PID:2304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads