03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3

Analysis

max time kernel
149s
max time network
138s
platform
windows11-21h2_x64
resource
win11-20250610-en
resource tags

arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system
submitted
06/05/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3.exe
Size 10.5MB
Sample260506-ttlbfaet6v
SHA256 03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3
MD5 3820bb2c2e06c10cf15e7e540f850b35
SHA1 ac6c17bbf4318d6640c8787100748d54ab023d61
SHA512 af01f71946e50c1395ba45664e8cede4583feb9f0a2d7440c321046768d467b5e38ce798797e78037c0fcaf3c613af069b54257e990ac1fd6e740e6d33b6bd63
SSDEEP 196608:eBDY7jLIZW9Ede4NTx9Pe20/aVHYiu6E:ehY7oZFYGdCahYie
TLSH
T1DEB6CF96DB813129DD2E6A70213C3DAF9529ADC51B700BCBD7EE7C9415707C3183AA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5716	03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3.exe

C:\Users\Admin\AppData\Local\Temp\03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3.exe
"C:\Users\Admin\AppData\Local\Temp\03c1dda8c62ee2b780d8359dadf20a7f01066edcb14ab55f82277634d4048bb3.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 3KB
SHA256 591396443df559284ccc688081b65948ba9d3e491ba1361783680576e4431dd6
MD5 f6dc70aa7d5297e9d77fc1f67512b27f
SHA1 d573344d9ddeed166bbf8e72802af3effa891d48
SHA512 bdcbf924118563f3b12e89b0804acb9643ce9abcb2f1857321114ca55ead8929a0bd5184995eb20b5506d8c0f086ab912501e6913a1b52659ef31c16198b1da9
TLSH
T16C71CE7C79BF8575122D81E591BD2D91CF88700C631889F6BAB98AC91EC21203FBF615
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 fb5056dbb70d9fb0f0d3eecfcec8ebf566a4ecb8ecac67f86283921716a74f2c
MD5 725b02705c698ed2ee1ab53208683274
SHA1 ded28ad6a599af209504698fec0e7dcefb4c8055
SHA512 49494a9801bedd75304ff670f0f3238e233ddf691efe650d50934682261babb0293b4a42f5da242d7936ea1d7ff0e2ef22ed58b108c4b2fcae900c63a7a00b9d
SSDEEP 192:FwmwxpVARdPqIsys/sqXFmXzYlx6UF3AlwNlx6UFnAlwJU:2DpKRrpsxlx6UF3AlwNlx6UFnAlwO
TLSH
T114E1896C787FC532262D81E5916D3D908FC8700D630849F6BAE98AC92ED31213FBF656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 f92971cd90f26aae7b26314a0086886ef26b9fd35e80149571d41a92d4d4649d
MD5 3d0c86fb2b1073be8326a101675719af
SHA1 a68fe09e2098551161b9740e9ad9b56dc39a7244
SHA512 4ead7d02f2d83ac98d68e9a6fd16a5882da392661e5d5057e764c2ec4b9c4e22e6bf03fb85af56240b56369dc660cd0ac61834101c40fe6af53ff2274d2508b8
MD5 SHA1 SHA512

Submit Download

memory/5716-129-0x0000000001F80000-0x0000000001FFA000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads