50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558.exe
Size 258KB
Sample260819-darfcaxvbt
SHA256 50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558
MD5 9bac3e3f31511871c96fb53317a1fd88
SHA1 6620e6898fb4edc8024d32df9680610bf8a53c74
SHA512 df792c39dc13e9be76f78c6fbd6c5799f6a09ffa97e9b6427b3503c1f101703f029693070d93fb9c317d964cc11873953d4b2f202da8eae26dfa9cf5e4e341eb
SSDEEP 6144:Jx6eB7zt6i0JQgXKu8uyDLe6LgpXAgyCT:Jx68d2GPhLgpXAbM
TLSH
T188447D21BE16C437E6860471A9AD9F7A997969315F6910C3F3C01FAAE8202D37F35B07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5928	3572	WerFault.exe	89

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558.exe

C:\Users\Admin\AppData\Local\Temp\50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558.exe
"C:\Users\Admin\AppData\Local\Temp\50da5b1934338196417e0375574eea3a2218ff9d55f1d7208485398a7a32f558.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3572
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3572 -s 520
  2⤵
  - Program crash
  PID:5928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 388 -p 3572 -ip 3572
1⤵
PID:4460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads