Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 08:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
- Size 795KB
- Sample260910-kay9hstsdy
- SHA256 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0
- MD5 36136711ef12d63245d4f47ff22d8328
- SHA1 0131067c35a4b512e9fb1e9c54899450ee2b6f81
- SHA512 9f6004d014e262a5d3fbe2dc3d9c80a4ce36205f0f8b718fd87edccf3cb98429092de98f87ae1f01cc3f099b11dc440f868aa58840110cddaf9daa6192b1eaa0
- SSDEEP 12288:HnrePWUGNJzhn+goKITpz/bSePLQiEBltsVy6Wy4S3:HrCWUGR+gITpj2E7s0VyxyJ
- TLSH T1DF05AEE5795E76BBC00A1CBA8E568E6674EC57B287504C93FFC53EBA4910CC31623932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4516 5856 WerFault.exe 87 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe"C:\Users\Admin\AppData\Local\Temp\7753c3b78cdb7077b02828e9fa8522c3107cf446fa5bea633b40472777fa97c0.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5856 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5856 -s 2722⤵
- Program crash
PID:4516
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 5856 -ip 58561⤵PID:3036