da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe
Size 12.0MB
Sample260509-vbkgvsax2v
SHA256 da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b
MD5 f9bb933fee77a1554bdab104e53ef4f1
SHA1 5cdbaf93c1ff7b4153dc82a5659e5a7967d34e42
SHA512 9ac4401fc5e2b9b66a40556792f0a034e6d0b8ba797a83086babe4dd59eb573c3d42421019d3c5513528b444e6ec2888a9f1e98096b787bdd723122c73532dff
SSDEEP 196608:AdnwRZenXaHHcT0Q/tCYNTx9Pe20/aVHdiu6E:AJwRQnXsw/tCmdCahdie
TLSH
T11DC6D096EB813135DE2A6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
23	4304	da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4304	da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe

C:\Users\Admin\AppData\Local\Temp\da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe
"C:\Users\Admin\AppData\Local\Temp\da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 cb24e3c4e0e44a43261aba04b5092850bb03936ddd4eba81912b208cc95ef7a1
MD5 afdee76dac281bf23d19af034675a285
SHA1 2aeb89a326c9182e219399104fe1becbc8dbacb1
SHA512 b702fa96c1dc2c1d173b0c4e15185925c682baa41c285de29639c5e6e8d24eb91fa8b9b4706b349c4af3eddebc834ee9c1f00e97d3e69aeecf13d035caf70f5e
SSDEEP 96:KgUkeNQ/C3H6HbzbHhHz0Hq7DHE2HESVHE9HEHHEdHEgHErHEbHEI8HExHfH3H+8:3Nei/CagV5aE63o4QdT
TLSH
T139A1F2113E66D9BD366DE1C4F17A2DA48C483A87A421B5F2B2CB23697BC211C7CBF055
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 b43221b1a008643a844a308ff0f0cbc24e98f99ffd0569a1f8a66866148a9abb
MD5 8141d32807a2f37a231d4dd5347c01a4
SHA1 db28e375e2790457db9a1d0768da3dfb8acd4b3e
SHA512 4520df1d760d957b85452db0ea9b8122cb4ddc4c0e279157f4034bb2d4e662742d9fed5471b56e6958328611e2aaf4cb4231ac0b227938893e0d10b4ed1549af
MD5 SHA1 SHA512