334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1

Analysis

max time kernel
148s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/05/2026, 19:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe
Size 11.6MB
Sample260508-yefvmagx2k
SHA256 334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1
MD5 761de5cb49abe6548aac87bf07601164
SHA1 1c7f1a3de85497592e6036c7b9018fab86a46f51
SHA512 bf5bf932489a545f24fa08128a7477cb0385f7bb3d827cfe6258159a472c91241b4ce506b9cb0bb75678cd55a38fc4e8dd1fb276cb934cf3bee9f2929bc9ce3f
SSDEEP 196608:vdnwRZenXaHHNg5lYNTx9Pe20/aVHdiu6E:vJwRQnXstgHmdCahdie
TLSH
T145C6D096EB813125DD2E6A31153C3DAB8225BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
41	1308	334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1308	334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe

C:\Users\Admin\AppData\Local\Temp\334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe
"C:\Users\Admin\AppData\Local\Temp\334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 59ad8f5b5783c609d528cb714bc41bf558a5864dd17cfad0c2296e3f7c84f59d
MD5 13b8386535b6e69a4b7f9d6c152db2ec
SHA1 f15d3710ae8869ac69cb8ff1da31edb7392d1bea
SHA512 a6f29e871d8a4f132a01b0a9d5a05f275d2cda0239a341165e71010f8a84296d6fbc0f335ef4048565e9592969ff3ca4e35dd50f03de0a8563baab0d361ae3af
TLSH
T1C141CA14BEBD09B65BC8C90BD0711D91EF297789B139C7E52BAA0DAC15C28213FAE158
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 49301551ed446435a6cc3699c41f45f8e8adb6bedfc95b1eda9ed2e809f6d54a
MD5 a36a6ebe7f804f1a52853ec759326d0e
SHA1 949f9da13bb1c7040b4f5fbf15018af268347353
SHA512 c215db54f840027106c5516d25b8f86321eb3e7239e46602ef43196bba59cc0bacf1a54c327008331229e21cba141631366b6f5cd9c04796495b34d39e291665
SSDEEP 192:kxlNmLIgfjgCEpiymuoHgfjgCbpi7muugfjgCbRi7m/xs5bD2R9U:umLrfjgCEpiymuHfjgCbpi7mupfjgCbC
TLSH
T16F22C9547E7D85B35E2A8196DA752CB2EE8D330DA038CAD46BDF0D9808D29103E7F15E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 a4e35b19e012a8bbbbe8ad2a79b8d4bbd6cc6ae117c80a15c0c10ae49543c3b8
MD5 2271d42b27bcad0db463aeb599826866
SHA1 c17c45d66f64a0c03d1d496f1b82db7c13c8bc81
SHA512 22403e030218cc613e2e3de812d4a76fec9fc874552f8d9307661bae814bf168f4fdbaa066004f183a29c671e331865691f07b331ad1de2bc1845e3b965464a0
MD5 SHA1 SHA512

Submit Download

memory/1308-152-0x0000000004250000-0x00000000042B3000-memory.dmp

Download

memory/1308-178-0x0000000004250000-0x00000000042B3000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads