0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 19:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2.exe
Size 498KB
Sample260818-yjgbysyhma
SHA256 0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2
MD5 302d483d278f65c5f1a16051b42f1699
SHA1 2bf437f662dee57dc4c1129f5553e534043bfee4
SHA512 e8967c1e52797a85833af3d1825d776844ca58220ee9133ec967e5fb20e9ed335b7e462f6474d054a073f0faf54df2c73e602ea35db9503a041fb51366aa9f58
SSDEEP 12288:EksYWIliuriCwV31fdN7R3PQMGLxe0D0/gQ30VaoPb7xx:HsYWXGiCwVFD7R3PQTx7D04aHoPbd
TLSH
T1C8B4BD0325C8BDA6E5746272773B8BE1CB2CDD680752C9CF93C825A18D7C6C276663C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4920	3176	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2.exe

C:\Users\Admin\AppData\Local\Temp\0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2.exe
"C:\Users\Admin\AppData\Local\Temp\0623aa343c607da8cbbfb89c550b88de2a99bde3e0bfaaddd1e10b10662dabe2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3176 -s 256
  2⤵
  - Program crash
  PID:4920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3176 -ip 3176
1⤵
PID:4768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads