a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe
Size 11.6MB
Sample260511-qsrv2sa19w
SHA256 a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d
MD5 b3cd7c294f91e9fa301638d9c74026da
SHA1 41737a9f4eecc64a9734ab2dabe124c44b155de8
SHA512 a568f07dd13baf8f3127e51f7f8eead31c4000405a85f823403f85d1ed5c1e9bde8f0c85cc2e21eef8fd5d3f471966f504364acbab17c9f3fe65976e26822be3
SSDEEP 196608:IdnwRZenXaHH/uvjEmiZYNTx9Pe20/aVHdiu6E:IJwRQnXsfuvTAmdCahdie
TLSH
T15CC6D096EB813135DE2A6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
54	3248	a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3248	a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe

C:\Users\Admin\AppData\Local\Temp\a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe
"C:\Users\Admin\AppData\Local\Temp\a442c7a2f9ee11849c4dcde170a9fa2653794cea7a73792fb123bbe211bc112d.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 941478875bcf55956971138b78479ad683703090586f601bb4477ccd7d114642
MD5 aca6445aabdef031bfa4207bda220520
SHA1 ebc4c2ac991f9dbb1a0f551668121b6b038d2c84
SHA512 fb87da072bd15409e6ec0619cd886429cd31d5dc9a81cea4f288c0d60fb9655d97f523acd8f8d4ef9e078ceb7e2f7246f58352a0e8a069593496a797a0aeacd5
SSDEEP 192:Nhe/OWGkG5GOnNGjkAbgIqnlaXZ68TrH/fBcdgoiPR2Q/qA:3e1rW5jlAMQL/fBjoiPR2Q/qA
TLSH
T1DFD16D0139B98D31765EA1A491B71E909D88717BB19CCCF1BDFF25A088D29387CBF059
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 a098948d22d466fdb1a2e1011cfce881c8d0e5434c24d2417c666f4138e54d4b
MD5 564cd222244f13a734c54f186b49ea4c
SHA1 5bafd5a6db7c3a8c102f342135e5e38c2c48cd8f
SHA512 0fecfaf5adae058e77123b38716d9f699a07630fe9aa6accd54ee53649d3c158008f0c411905b1578fbf1f84fbe0da1279b00601a1fa6cfad9dc593a67978a83
SSDEEP 192:Nhe/OWGkG5GOnNGjkAbgIqnlaXZ68TrH/fBcdgoiPR2Q/qBrgoiPR2w/qBK:3e1rW5jlAMQL/fBjoiPR2Q/qBMoiPR20
TLSH
T126125A0539B88D32765FA1E4D17B2E905D88717FA18CCCB1BDEF25A188D29287C7F05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 a3f420ecbb452ee850706ebeededd495abae3f1c842c1797e84a2298610e8b02
MD5 40795cd9b7ae0ecd9e0563792b75f1f9
SHA1 afdc293e6eea44e285ed0bb58cf61a622f64bd81
SHA512 31077af571c5e04ef51665862e8702de6e6767b224d081608f1e426777c51547bcd4aa7fecccfe67a7f8fa12d6489e9fe1e5199b9c7afec5469e885f8e565788
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads