Analysis
- user interaction
yes - max time kernel
12s - max time network
7s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 22:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Creative EAX Setting.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Creative EAX Setting.exe
- Size 2.0MB
- Sample261002-2hezaaxtdx
- SHA256 b978c5509e24333043d25a8d7bbdee9d2f77bd59223bd7736a4aa85c2ee67a71
- MD5 825f6fa2f10b087086c1d978838e93f1
- SHA1 0f296d8a54f1dd483060558d08271eaedaeea527
- SHA512 136448c1f7b09afc9737fa9249ad0e2b6fef0094e0824a9213c3911174943f88fdd4f96eac86fee813a56a04855dba06c9c85b43fe38dc2e06cb7c090d8c0f30
- SSDEEP 49152:WUv+UXfSCiuUgaMj3XRD+uBH2Cuk1+Lda3WvhoLDeH7u+XsNGtMsCKS:SDMj3XZ+ut2Cuk1+Lda3WvhoLDeH6++t
- TLSH T1F5A57BD2E50489D5ED3E43F1B03B9CA112A33D7EE5B8951D24DAB6A659B3383002FD1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1068 5564 WerFault.exe 86 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Creative EAX Setting.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Creative EAX Setting.exe"C:\Users\Admin\AppData\Local\Temp\Creative EAX Setting.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5564 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5564 -s 9962⤵
- Program crash
PID:1068
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5564 -ip 55641⤵PID:4936