b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 10:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c.exe
Size 794KB
Sample260828-massvace68
SHA256 b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c
MD5 efb887cd40f0fe2c33c7579744151e45
SHA1 6e8019ff718d7c5607b230cc4da16d77728d6e00
SHA512 fd651d7451e905aa2a6d50e7643a77d7637db5fe94678572154e170a95739cfc9a7c6326444d9ddc58813eeea60319a24bffbc91af842b0aa33fac8ec1aef3ea
SSDEEP 12288:YnrePWUGgJzhT+goKITpz/bSePLQiEBltsVy6Wy4S3:YrCWUGg+gITpj2E7s0VyxyJ
TLSH
T14E05AEE5795E7ABBC00A1CBA8E568E6274EC57B187504C93FFD53EBA4910CC31623932
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3288	2152	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c.exe

C:\Users\Admin\AppData\Local\Temp\b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c.exe
"C:\Users\Admin\AppData\Local\Temp\b95b99f9e4684927a83d07d66e0c87bdd6e7b8d23a665fc500f93832c64d995c.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2152
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2152 -s 396
  2⤵
  - Program crash
  PID:3288

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2152 -ip 2152
1⤵
PID:4236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads