da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b

Analysis

max time kernel
150s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe
Size 12.0MB
Sample260509-vbkgvsax2v
SHA256 da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b
MD5 f9bb933fee77a1554bdab104e53ef4f1
SHA1 5cdbaf93c1ff7b4153dc82a5659e5a7967d34e42
SHA512 9ac4401fc5e2b9b66a40556792f0a034e6d0b8ba797a83086babe4dd59eb573c3d42421019d3c5513528b444e6ec2888a9f1e98096b787bdd723122c73532dff
SSDEEP 196608:AdnwRZenXaHHcT0Q/tCYNTx9Pe20/aVHdiu6E:AJwRQnXsw/tCmdCahdie
TLSH
T11DC6D096EB813135DE2A6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2840	da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe

C:\Users\Admin\AppData\Local\Temp\da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe
"C:\Users\Admin\AppData\Local\Temp\da92fbd76178a0adb1324e746038ab2e9c3627494334d8521e10236808274d4b.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 44d457c3a7168191862d590b9d38ddfa4a0520c48861bb075540b3a477443d86
MD5 3b9b7463b0633abcce6c303d1c051278
SHA1 823b237b6e2e0535373596ab81a9b970eea9d5c1
SHA512 49605d2a3b29f3c8958efe20269b240ff7adebb9ed64c8906c464695faf627840075fff3743f4f1be3af1edc34b0b9b2a7048df90e3835989409162718890d99
SSDEEP 192:nKem6HAgaWxB3stnPajgaWxBEstyP1g+Gh1YUl+Lm:o6HjaWxB3stnP3aWxBEstyPG+Gh1YUl1
TLSH
T1E11259253C769927369EA1FCD17F2C607C89A01816158EE6B2CE0AE14BD2A107CFFC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 5cc9ed6ec89b6bf515fb64599c40a907bd4854cf6667cbb20d82de57d09983fe
MD5 422acbff37ab953292b85ff28e4ab9e5
SHA1 3cb6a61d93c1147fdc7a99e157543887d6dba8d1
SHA512 115bdb6a414d25fad104b267a1d731e6a5880048f796ce8061a5dea4d1487407a46b49523fe6f13743ebacb926ff36ddce2133e20fad1033ccc7c39fb42b3d50
SSDEEP 192:nKem6HAgaWxB3stnPajgaWxBEstyP1g+Gh1YUl+LLOdfHqtHU:o6HjaWxB3stnP3aWxBEstyPG+Gh1YUll
TLSH
T11F2269243C769937369DA1FCD17B2C647C89A00816154EE6B2DE4AE10BD2A107CFFC6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 25207a09845754786152b45a0f931ff40843f96d1f2ccdc2cdffa8643b837735
MD5 d5e19ad6d713d047fa783c5d225050e1
SHA1 c7b9468f7e462a0416dd363ea37cc4e0e1d010d1
SHA512 e99baf71dfe86ae562c336e39e61108aae66c65c65dfa3461688e23aac997a3c5b004704d6fedf09a0134f2e9d3b013326929f07f866c44c6b35c03f9dea69e0
MD5 SHA1 SHA512

Submit Download

memory/2840-150-0x0000000002010000-0x0000000002035000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads