334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1

Analysis

max time kernel
150s
max time network
137s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 19:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe
Size 11.6MB
Sample260508-yefvmagx2k
SHA256 334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1
MD5 761de5cb49abe6548aac87bf07601164
SHA1 1c7f1a3de85497592e6036c7b9018fab86a46f51
SHA512 bf5bf932489a545f24fa08128a7477cb0385f7bb3d827cfe6258159a472c91241b4ce506b9cb0bb75678cd55a38fc4e8dd1fb276cb934cf3bee9f2929bc9ce3f
SSDEEP 196608:vdnwRZenXaHHNg5lYNTx9Pe20/aVHdiu6E:vJwRQnXstgHmdCahdie
TLSH
T145C6D096EB813125DD2E6A31153C3DAB8225BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4348	334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe

C:\Users\Admin\AppData\Local\Temp\334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe
"C:\Users\Admin\AppData\Local\Temp\334326ab028e869186c127abc529e68e8f8f110039967932354d98c5b694cba1.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 3KB
SHA256 8f62a3b9ddf4bf11475fa27e04a201d9912ebfd8b829a6367b3dc4e99382e77a
MD5 0aa42d902bfdfd3294db598ebcb7cea0
SHA1 ca8d713cdb874c393d5262fea4c03d2a109ca1c3
SHA512 dd372018e8e194a6dc87a3f9fefbb435ea593ca8666ce6c216bb811eaa261268104225f452ab61fd78a978d2afbd2dbeb16a6ec7d22f88f28d9b313d8e987034
TLSH
T1B58199183CACC5771E0DE595A4792D52EE4D3188203D8DE6738F9FDC28AA2243E7E169
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 b0f4a1602241193397fb3e0adaf3d85b242ac3edd481fecb54eaa2fd3c2734a4
MD5 a8177cda3393711a76866fa75db47dc6
SHA1 ed2b3c2d03b12996fcfa738de5870051e777c842
SHA512 8ef183648ca14298da3c099b6a1c68b3a2f098fbefad58ad89de7fd1a7fd6f1553a25cbc2810b628c77b8a9a6059a4b132aa7c315d35598176bb4381ad7aa0c6
SSDEEP 192:L2llanfgRhCAOHI0kyijgRhCA5HIBkyWgRhCA5XIBkHLOdf369pU:YanYRhCAOHI0kyRRhCA5HIBkyRRhCA5i
TLSH
T1062268143C6DC5B31A1DE594A4792C52AE4D358C103E8DD6B2CF9FD838EA2243D7F1A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 f887367677d2635b73cfdf047ab514a45e1ae177ae69eb6cc63f46251be4bf4e
MD5 9abdd40d8b55600a993cffd11c146595
SHA1 5603c73a9bf6d641cf4a5b3800e8ba3dabf08897
SHA512 6707e58f929d8ea003da39351fdfdafc431f5a96d33d5570e878eafccfb4560dc86f219e400fd10a7717930cf61a769663f6f9bb5011858437006fee84f1b07f
MD5 SHA1 SHA512

Submit Download

memory/4348-154-0x0000000001850000-0x000000000189A000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads