8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2.exe
Size 6.6MB
Sample260827-rnfgwsvwcs
SHA256 8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2
MD5 9a90fef6da0f7a24334539aaeebdae7b
SHA1 11cc0f7d98da1f671cba453adc6a4e3e9c5dd479
SHA512 edbbbc5d7171edbecb7d3a3da1851d98fa225a23e578939c76ca1347123e69b38c799be0a800bede56b8a3a581d9aaefa6047e21dd43d568e64fb96ac322efd7
SSDEEP 3072:+uOULoyNPjcpwQw6hAeyfoxxiNzfBBxGv+XGJ37IopzqtV5LiaRvKlnqIo8Wmzw:+jKjcdw6ByAxxiJf8mXGzFKcRhW+w
TLSH
T1D4669D02B2D040BED5EB163058765FBA9ABE7D028725864BA334FEEE1D71741E42934F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5076	4536	WerFault.exe	85

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2.exe

C:\Users\Admin\AppData\Local\Temp\8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2.exe
"C:\Users\Admin\AppData\Local\Temp\8d3f8fd50633fb8bff436d1095d913761378c98d0ef2e355aaad20c78a6715e2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 524
  2⤵
  - Program crash
  PID:5076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4536 -ip 4536
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads