5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb

Analysis

max time kernel
148s
max time network
129s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 09:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb.exe
Size 10.5MB
Sample260508-k3e2cae16v
SHA256 5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb
MD5 0328cf3576412bc002e89ac9aa28bc3d
SHA1 f78f3cad00c0b0ab03e7acd756833b7095b94ace
SHA512 35f4f3eee4a4510e2ecb4bc37185139a2b3f5188f5e1bf34afd1b3b79277144bc1da1bc2bcdbd0634acad6c29c9b970185625c61a5b33251a58bcf487e2eb2b8
SSDEEP 98304:V6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww7:qdnwRZenXaHH1YNTx9Pe20/aVHdiu6E
TLSH
T1C3B6CF96EB813125DE2E6A31153C3CAB8215BDC91B700BCB96EA7C9445717C31D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
868	5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb.exe

C:\Users\Admin\AppData\Local\Temp\5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb.exe
"C:\Users\Admin\AppData\Local\Temp\5b8acf392348068ac3f7b403da69324c1584ecbc055c692d0964c3eb38bcb5fb.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 d1ad66e304f1d410692b1256d26b8d415cde89e7ae82cdf66c248e7cd51972de
MD5 e093afe48db327e327b22f1aef273943
SHA1 163f6306eeeef0dcd9c5d7e3aa755ac2eb4124e5
SHA512 64cd4cf042e832929b989d85304bab9a0d0d14dea504507c735c4bbbea44d0f4fb74612022ef9bc95d9bb91916e48862af2aa02903319769a5d50ac2bec51dc5
SSDEEP 96:Kizv1rkjfuPyRHMHxZbPH1HeHabDHE4HECVHEHHELHEsHEYHEpHE6HEu8HEBH9He:L1KmPy0bgPJEITv2JmfgPJEITv2JmYU
TLSH
T1F1E1BF517A68CD36167F61B8EA7D2E96ED883C0860188DE2F9CF9A04E9C31133D3F556
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 4f6a55c2fca481621d96f7e763640f133f43ad2c7ad4490d4ede8acb06ff54b1
MD5 35a15ecde15f49647aaf1a3d55fa53d7
SHA1 0196cf878bff54beeaefaa694248a38b76d076b2
SHA512 1d2ae08484db1e63dd7114c554192ee2718af4119ed1ff290b5c70b59cdd8dda107d10671bf356d087010054851bb1abda6243ce5cfb53a089c691c219f7e33e
MD5 SHA1 SHA512