92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 07:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe
Size 11.6MB
Sample260509-jlrhdacy4v
SHA256 92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644
MD5 982a95ce4db8279e9bc6d3b90b8e5599
SHA1 8d0ef4801df345d6b9059d368060190fc037ab63
SHA512 3e11c9dd8dd7fd6a008e208cb31e59875a5411291e83cb83c895f4461502c7c0049f8ecf8163ef7a75c08cd6cca5dff42d61f92e1ec5a0e52f254abdcc80a34d
SSDEEP 196608:SdnwRZenXaHH5tOMmpYNTx9Pe20/aVHdiu6E:SJwRQnXsZt3EmdCahdie
TLSH
T1CBC6D096EB813125DE2E6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
33	2700	92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2700	92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe

C:\Users\Admin\AppData\Local\Temp\92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe
"C:\Users\Admin\AppData\Local\Temp\92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 9f4da660c0471c32a1a8d33c9df7df7211678c4d5451e3b72da1ee8bb3db0eee
MD5 975ee53dd0519bccc63ecf2e1138910c
SHA1 a8048e6d70a15ccf40064c11eee6ad38ad192d01
SHA512 02dab18161c91007cf3a98c70cbfa803e2bbfff1f7bfd056aa4c60700acf9cbc9ef1de8c0540a89e8485111b8dfa6ed051cc2f5da623253b93e7480537af0613
SSDEEP 192:EOC/LOzb3nAmU162Ors3nAmr16HOj3nAmrt6HOo:GOzb3nAmU162OY3nAmr16HOj3nAmrt6X
TLSH
T10C0258603F72853B272AA1A9ED7D2E946C893A2D30304DE579CF13250BD35917E7F0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 b1772766f542ab13a33f2b1d500043ca3f2e1726b36780866c60c3efe82a6086
MD5 20ea25e05f72059ea726a444edbf6f7c
SHA1 050ecffb5b2f4566064505207daf89ae9d630ddd
SHA512 7200b93ecda747703c2b68311568bda99911baa7098835e0b4a84c209787cb0fb966aabef640232feec838d0f275ed572c16c81769615aa4c2c5f264165534ca
MD5 SHA1 SHA512