dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796.exe
Size 3.8MB
Sample260919-hdps5scd59
SHA256 dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796
MD5 8c98034739b1f05e4f0f6b6dec8d79ed
SHA1 067cb314d03fb6816a4848bb5c5bd2bbb11324bc
SHA512 0568652f6d3b39efc73a349c18f91f8e04676bd8e50094622a35e0235fbddd07702d9b6b70b8ebc3f2937816b6023e8e91d227a36d3cda2e9793607463d9ae1f
SSDEEP 98304:5Z1rXis1RKOfGPL0nej4jeQlsLlG4G9jTR:5CsXKOfGPL0ne2
TLSH
T14A065B13A101F452D12539B212BD5F386DB0BE662C78895BF7E8EDB2AFF15218BB510C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2964	984	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796.exe

C:\Users\Admin\AppData\Local\Temp\dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796.exe
"C:\Users\Admin\AppData\Local\Temp\dce2a06321233b20880b6a126f7067aba48eece540af74f66a3e26a6c9d8d796.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 984 -s 264
  2⤵
  - Program crash
  PID:2964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 984 -ip 984
1⤵
PID:1840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads