92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644

Analysis

max time kernel
149s
max time network
131s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 07:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe
Size 11.6MB
Sample260509-jlrhdacy4v
SHA256 92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644
MD5 982a95ce4db8279e9bc6d3b90b8e5599
SHA1 8d0ef4801df345d6b9059d368060190fc037ab63
SHA512 3e11c9dd8dd7fd6a008e208cb31e59875a5411291e83cb83c895f4461502c7c0049f8ecf8163ef7a75c08cd6cca5dff42d61f92e1ec5a0e52f254abdcc80a34d
SSDEEP 196608:SdnwRZenXaHH5tOMmpYNTx9Pe20/aVHdiu6E:SJwRQnXsZt3EmdCahdie
TLSH
T1CBC6D096EB813125DE2E6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5296	92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe

C:\Users\Admin\AppData\Local\Temp\92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe
"C:\Users\Admin\AppData\Local\Temp\92f66730ea37f5bf628e36bdc2236d88090eb367a171f9274a24518f5b37a644.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 00883e72ce3debb3e1ac8dd00862428b2c7066a63362284d647c17137ac95aa8
MD5 9ba0db637fae641595ae82254796a5cf
SHA1 2991e133ed68cdee8ee4e3f212d9591a6076a0da
SHA512 8cdade40da98e0e7dce0df0a052c348e5a604852cbaecd420149da5d60d3276a18fe0dd9962308f50aef6f03b2bce0eb6dbcdbe58a747f6a2e7c250c8cb55870
TLSH
T166418B907FA6852A3FC8C30E55605E95DC24BE58B81B5BF537EA572007C30623BBE425
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 0cd20619878d33bfaa55a9b446f0b23852489ad1882b3025b41db6999030d979
MD5 e32d3fee2ebd18c1f96bee308760c6d7
SHA1 84da436cdfd50bc54fabcab7e3c14eaa775415f6
SHA512 27f49a100fa2bb043e54dc7ce6c91abac10b96c743c79379aed98059fb215a6f3a4cc3cc9cde89be5eb19b566d27fa1930f024cd5e235f783865d4f8860c1eef
SSDEEP 192:3bC/v4136CV5fQBnf2sC6JlEoteXxC6JlEYteXUN+CMZQyU:u4136CV5fQBnfDC6JlEoteXxC6JlEYtl
TLSH
T1BE2264903F62C53B3A9AD29CAD697E546C983E2C64155AE171CF83211BC31237F7F05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 3485efbaecedc693273d1fb4a08ab2576b8871cbef2ed59aaad4d6f23d782359
MD5 01365f75b55604db332f0602e894fd77
SHA1 cfd9ae4cea660398b3ceac9365e1d3d4fd6e0c0e
SHA512 24a873a8378f321ebb52196769ad073751f22a5c0183f8fc1e76fe3dbda8b37279b1fad355ce7ccdfbb7797a7ae5b13fb38d68cf5d2d630ece1bb40a78d5b440
MD5 SHA1 SHA512

Submit Download

memory/5296-150-0x0000000005C40000-0x0000000005CA4000-memory.dmp

Download

memory/5296-250-0x0000000005C40000-0x0000000005CA4000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads