Analysis
- user interaction
yes - max time kernel
47s - max time network
50s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/08/2026, 11:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Terraria.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Terraria.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Terraria.exe
- Size 25.4MB
- Sample260824-n1gzpsxbrd
- SHA256 960a03bff6050cf7be16dfc1a7b19e10fc2c4f8f835a6a3b135a50dd9e6ba2f3
- MD5 890f5654041f09607d74596d46249000
- SHA1 3ff75e4f7bed01731643def81147f8dfa90b06dd
- SHA512 ac3571cea1310f58ba2f65726834cfa59f99ad79c65d8e62bbb4c5920168edfdcba8209251908196a32ff0b0542e9e03b9de89a4673552f18986bab9e7aade8f
- SSDEEP 196608:nVZxA9/aDOdyr0hqCZjwTaVYrd5P3+OXdb:nVZ0dyr0A
- TLSH T120479E3767C40AF3C1DE1BBEA41E2DC2B2680496C355A7DA5DAEB4BD20D8721C40D7A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4548 1680 WerFault.exe 83 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Terraria.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Terraria.exe"C:\Users\Admin\AppData\Local\Temp\Terraria.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1680 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1680 -s 8322⤵
- Program crash
PID:4548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1680 -ip 16801⤵PID:4796