78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e

Analysis

max time kernel
148s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe
Size 10.5MB
Sample260506-ts6kzset41
SHA256 78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e
MD5 7b13b80684f8d5b9f9e119ab77cccd24
SHA1 7e2c85abc301e0051f2d60e6084b468535a8a4f0
SHA512 8f0571d49e1c4ae931cf7ffae498ebed03995ffef2ef39a5d6aa37c6169bdc7a90ec54a435759a32267cf0795a4d0bb1df4aa550c5cb6934cd8bde34bd2aed11
SSDEEP 196608:eBDY7jLIZW9Ede4NTx9Pe20/aVHYiu6E:ehY7oZFYGdCahYie
TLSH
T160B6CF96DB813129DD2E6A70213C3DAF9529ADC51B700BCBD7EE7C9415707C3183AA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
21	5380	78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5380	78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe

C:\Users\Admin\AppData\Local\Temp\78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe
"C:\Users\Admin\AppData\Local\Temp\78e857b5035f78db756e20685b8672d184082c5e7b55a1647fe141d8aff4c63e.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 f2dd4a01f25d933490dd52b950b7137f98f5decf63ecbd91f2f9010be459a615
MD5 d19061bc113d5ff5ef7deb9f5f4970ea
SHA1 9ce9f99421c0bb722e451e48e24691ea2242105e
SHA512 749c310349a736dcc671c92a2d8b42264ffbe64801c511a595d6e97c2f8de8f80141478f9d88915a55f3089fe52fa1861ade3118c89f5a11b425b40aeaeeaeb5
SSDEEP 96:KWmiB5wBNSTS+SByHT5HAt0poa3LPHFiHE4HPb4HE8qHEnbVHEWHHEBEHEwWHEr7:JHCqXZ+G2hl4sN2jLoQnLmOHkA
TLSH
T1D6D1BE5539728D2A161E41E4EB792D94CCE83849202CFDE1F2D989C0EDD21266DFF4B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 0069d9263003cc24c346f0a6988d990f379908fc755293cc8365af63843f8f69
MD5 01ad440a7d18355069eb1bc9b7fc3424
SHA1 82ed37c7f345189bec350bb5bd62ed1a8812181b
SHA512 0070220035f0a893e13ee9c80101488b2367cbf70e2512e4308cdee4b2f557aeaac3bad624680119f8feb47ba4afc577c218cde297b7edcd83a5b01bcf5f3b96
SSDEEP 192:JHCqXZ+G2hl4sN2jLoQnLmOHkBMXVt2VO:FCqXMG2hl4sN2jLoQnLmOHkBm
TLSH
T13BE1BB5539728D2A162E41E4EB792D94CCE838492028FDE1F2DD89C0EDD21266DFF4B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 46c8d493d70d843fd2b98a5046c634670796f7cecbf145e595c69da21c2aa2e2
MD5 8416c5faa9bef83708c9a9b73c5bc5ea
SHA1 03beaa869eb165cfc5db0b6136ed29eaf23da950
SHA512 964267b9b248260b227869f49ac9cdca48a8c14593cf1c7f0a25382543f32ebeee54bfa775a68a67e8309b874bb1de39fa18014c527ec6374064e8217142b762
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads