3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b

Analysis

max time kernel
149s
max time network
129s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b.exe
Size 10.3MB
Sample260527-lfvnysct21
SHA256 3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b
MD5 871274d0c9cca58050e99c4effd7e233
SHA1 0d107decac4c682dfa5a63254e48410511e3b951
SHA512 092274aab22ecabd5b9c27444e6412ab3590f3d2f24ea7080fa3f45a2018c5fb37e993401e3761d7833723dd21eb8d9beb5ff859fbadc1dfb16d440266fd5925
SSDEEP 196608:nuxzcCaVKlbZnyNMYNTx9Pe20/aVHgiu6E:nWzcvVKlbgOmdCahgie
TLSH
T17AB6CF96DA863129DD2A6E30117C3CAB921A7DC517700BDB96FA7CA445707C3183AFCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3880	3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b.exe

C:\Users\Admin\AppData\Local\Temp\3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b.exe
"C:\Users\Admin\AppData\Local\Temp\3241462c0c52568f026884c5dd7dd35195ff85002e00210b62347c281060e89b.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 63d97124410804b6613a1f06c056bd73fca9eb50f5b1d2b4a5c389cff490131c
MD5 3d14300321f4704faa22f4db43e81050
SHA1 13d8c6a48cb3aff9956572c94f4dcd91eaa927e4
SHA512 f49e47ac75d9ea6ac09c9585b00527f40b0bf51c04c04df44ec644742b8bcbc87377b839daaaa74a3f61a664ee90874266a5d799ae1169c8001908a24467a112
TLSH
T1DB51FD82BEF75ABA7AACC90E17610DD1CD2C3194B36489F1B6D5C3C891A213039EF5D8
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 e5c2b4d4e92460f561df20d93f5de61b60f2c5da386da3dc287777d79cab347e
MD5 7d59fcb87d678611a2a41b7dd2e655a4
SHA1 a71d36e83b1f521d4ace6fff4525cf6107ed7a61
SHA512 43713f6780f388c654e8b3eab84da022c69d0864b3fb2748003d0244e47082a68abd2c95fd5d40e0a69defd551b185b084feedd8af0e0c45f004c86bc5239790
SSDEEP 192:joexFwXaXnXF8SJv4pbzsSnxOjKM04TbqWr013eU:3IK3ebzsSnxOjKM04TbqWr01T
TLSH
T185E1678138B799BA7E7AC559DA6E2D904D4C3124629088D1B9CDC3C4E9F21307CBF5EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 a3360190d8a0957123adb8ba3bdf0ff886eb907245214cfd0287982e077ce1c6
MD5 d2e788ba065701ff31cf94a61e957ff0
SHA1 2dab5f67939facec229721d8ee89a91ac2ca3fd5
SHA512 95d3cbf10c64ab437cb6e38378b1563efb916b352812b4c68e9f949c418522687799f0b7caea9919a200b44fca1c084f2997eb9e143e83df6bac33b9214fd8ca
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads