8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793

Analysis

max time kernel
149s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 14:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe
Size 11.6MB
Sample260511-rvrthacv4t
SHA256 8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793
MD5 c429e8829f981a2d1ab1c090668df918
SHA1 5aa1be46fb53531155978f5f56bc39f957ea2c2d
SHA512 f3f77cabb0b7a73bc06005bfb63016a0471881c50b5392640adda72065101d3a332f8e4096d7fc6ef8d3e4bab5f27db902267b52c549c75069b8dd45b30928d3
SSDEEP 196608:IdnwRZenXaHH/uvjEmiZYNTx9Pe20/aVHdiu6E:IJwRQnXsfuvTAmdCahdie
TLSH
T128C6D096EB813135DE2A6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
23	6136	8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6136	8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe

C:\Users\Admin\AppData\Local\Temp\8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe
"C:\Users\Admin\AppData\Local\Temp\8b86d81ef4e500fdf6f3375ec5690193005749102ee686ce2347ad8674420793.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 f115cc36d7ce4582c86b391e9f3ab84de9dbc1c42923ebbce277c67826df6218
MD5 1ee342f99a9fbbc66e1beb4b7b09aa11
SHA1 08c8f63472bc618b46c5c3cfdc54a0dbc9a4a204
SHA512 3ad04963b0730fce0e4cc16535af9e750a1aa62e30390c829f5263b3a67a1bd7e81e4f3c6abb49b31e265aedca18ba2fc1e5e3372bc55eb3c32fd32d00fbd81b
SSDEEP 96:KWvXC9KbQtLH/H2qHUHwHjSDHEtHErVHEKHEqHEwHEPHEGHEoHEb8HEgH2HWH5HS:t/C94Qt6gqm5ZnMFffym
TLSH
T14BA1EF41BE66E5322B5A4154D1729E829DC8352DE908CCD3FAEA26008DD3D343FBE5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 6e2822cb8771b5c51a6cc32143af997a5fdec265a89040adab80911161fba0f5
MD5 4f1dd1776889b0c06778d88fe79a7155
SHA1 79c9b4057493efa6ee9e5cc00ebd509e4358aa14
SHA512 b335e5318b9de4652dd2e68efc6ac1aa4899cad919e4dcc321cc056c0cbac73c807b5e800e799eaf9623a00320e8f7f71bac3885eeb26847998b9b2978877173
MD5 SHA1 SHA512