Analysis

  • max time kernel
    148s
  • max time network
    115s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    19/04/2026, 22:32

General

  • Target
    5904e0a713f59174909d480367ef4122f73ec2d49f2a160dd6ae37975f2fc490.exe
  • Size 2.5MB
  • Sample260419-2fxrbabs7j
  • SHA256 5904e0a713f59174909d480367ef4122f73ec2d49f2a160dd6ae37975f2fc490
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5904e0a713f59174909d480367ef4122f73ec2d49f2a160dd6ae37975f2fc490.exe
    "C:\Users\Admin\AppData\Local\Temp\5904e0a713f59174909d480367ef4122f73ec2d49f2a160dd6ae37975f2fc490.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3912

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        lite_installer.log

        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 1KB
        • SHA256 b802a326628f8dfcf05ba50dc6f30d4b93d4382bcc6e01bb531f6940a2310bec
        • MD5 SHA1 SHA512 TLSH

        lite_installer.log

        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 3KB
        • SHA256 10c852e1b4cb96db073a3879121679117867a00852d4a891a27488bbf98b74f4
        • MD5 SHA1 SHA512 TLSH

        lite_installer.log

        • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
        • Size 6KB
        • SHA256 eec7cf68887fd684916d32d20834cc1c7ec4d253be795ffed5530328a9b0dbe5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3912-125-0x00000000051C0000-0x0000000005224000-memory.dmp

        memory/3912-165-0x00000000051C0000-0x0000000005224000-memory.dmp

        memory/3912-181-0x00000000051C0000-0x0000000005224000-memory.dmp

        memory/3912-231-0x00000000051C0000-0x0000000005224000-memory.dmp