Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 08:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
- Size 795KB
- Sample260910-kay9hstsdy
- SHA256 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0
- MD5 36136711ef12d63245d4f47ff22d8328
- SHA1 0131067c35a4b512e9fb1e9c54899450ee2b6f81
- SHA512 9f6004d014e262a5d3fbe2dc3d9c80a4ce36205f0f8b718fd87edccf3cb98429092de98f87ae1f01cc3f099b11dc440f868aa58840110cddaf9daa6192b1eaa0
- SSDEEP 12288:HnrePWUGNJzhn+goKITpz/bSePLQiEBltsVy6Wy4S3:HrCWUGR+gITpj2E7s0VyxyJ
- TLSH T1DF05AEE5795E76BBC00A1CBA8E568E6674EC57B287504C93FFC53EBA4910CC31623932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2016 4600 WerFault.exe 83 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe"C:\Users\Admin\AppData\Local\Temp\7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4600 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4600 -s 2402⤵
- Program crash
PID:2016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4600 -ip 46001⤵PID:3372