5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e.exe
Size 151KB
Sample260905-payp7stgle
SHA256 5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e
MD5 cd950ea1a703652f4b7d6dc190d179ab
SHA1 45ba82142ed4541303a1efc72fa18b9a59ecba8c
SHA512 a71b6a94fc703e56d0098a4b3127cb18ba4e98c0199fce69def9480b6e131a5853fed2595c04b4aa923bed0c9c7c0c42044add8b9390033c3ae646b8741cf661
SSDEEP 3072:W+xz0Hu4jGJ54tqqd9soNvWy/nRI22B+flkL7OjUuxGftPyhdY55s2ZUuyNFhyzK:HCO7Jutqqdf7/nuFB+/
TLSH
T159E3C51073F8516DF0B3AB346D359B515AB8BC32EA25DB7E2AC01A6D0E30941DA21F77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5092	4180	WerFault.exe	84

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e.exe

C:\Users\Admin\AppData\Local\Temp\5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e.exe
"C:\Users\Admin\AppData\Local\Temp\5b96c2a368d5532a29bfb94e6ecc06d470dfff424ebbbe493809232f1d4c790e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4180
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 328
  2⤵
  - Program crash
  PID:5092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4180 -ip 4180
1⤵
PID:3796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads