6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 17:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7.exe
Size 1.1MB
Sample261011-v5e48svsbv
SHA256 6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7
MD5 13c3f6c5bfcdf55c24495233d2edc5b1
SHA1 ace91227a288b672e1f5f49cac103d8098856753
SHA512 3f3e20ac6faed514d1dbb1cdfb7a040881519af468845dffb1c04a0a417d44a675d7fe1b5c6eff553041dccda96f1aa9b2d5f876034e30c553d434d7103d85c7
SSDEEP 24576:0eKdyEbnYXC9K0kd8iSZjozxT4KjiRQzIiMufWHd9:0eKdqy9K0k9SZjoz2eUiMuf0d9
TLSH
T145354A207642813AE9B300B2CEBE961D5168FA210B6654C3B3CC6D6E5FB5DE23E37547
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1376	4108	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7.exe

C:\Users\Admin\AppData\Local\Temp\6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7.exe
"C:\Users\Admin\AppData\Local\Temp\6fd7d0010d859f90b75fab3af80b8bbdf1d1ed56bd3e4dbc72c02958ae86eef7.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 640
  2⤵
  - Program crash
  PID:1376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4108 -ip 4108
1⤵
PID:4424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads