40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 00:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe
Size 11.5MB
Sample260528-a2fldaes6w
SHA256 40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe
MD5 9edd7cecc4187c96db268f3507aefbda
SHA1 e1717d297fbb46bdcc7f87d0e986ccc51f1a7be9
SHA512 1bf8a62f88a99ff865c39d5a5e7111ed91db2c00212ae658b3d1ed102b4b14503c6cfe9af3d986231f585ee44143ac99941a7bee7e58b551d7890d2fbedcb838
SSDEEP 196608:cGxzcCaVKlbZnyNoQ2bYNTx9Pe20/aVHkiu6E:cOzcvVKlbgJ0mdCahkie
TLSH
T1D5C6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
71	3964	40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3964	40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe

C:\Users\Admin\AppData\Local\Temp\40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe
"C:\Users\Admin\AppData\Local\Temp\40e8e00e89cf5e813c0952da3874ad630c8d6c7a017eaa42829a4f67ccfc30fe.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 470dc26af26801e638c3485481203541aec13751b42545066387dcb916649680
MD5 0afe1d94f6d70fb6347053c8d9e5c62e
SHA1 4f6df5b70079ed46721946646a644c45c2ddda08
SHA512 8444467b1bf6380053e2485485d8ca723240d70bc33adf6cc1bcd81ca9cf14450152a69c2d48c3e5930cfc31128ae59fbbd7bccbbba1e401c1db42c706333c1b
TLSH
T132511F10FFF54D790398C93683385EC6ED087093AB2C6AF1679BB0705491A11ECAD2BE
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 1ee866a8c1fa11c715c5ff6c330d550996b844d011524aaa74989f2ad105c778
MD5 27e75ff65b486c6b78c27420b0a81d88
SHA1 4ec281d90024c35d4653da388023144bb70f249e
SHA512 351285f37c46bc0a81eab21d8211e78fe50c9c9613c4e0d609e436ede4c21400a7af953e011f3df1891121518d6cb06fd0d67411dd500b61bef0efecde2b4f86
SSDEEP 192:WgpHu41AMc/TxCX9dooMcGA5L8psQ5tGA578psc:TpHu41AMc/TxCX9d7McGA5L8psQ5tGAk
TLSH
T1AF1227207DF28D36172695B8E3693ED2DD8C716B105858A1AACE9170ACD2510FC7E2FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 6f35ee242c251d99a3c010d54e5b84691d7d6db373e06d3711c8be5b57cc5ed8
MD5 9a919d9e8bbfdaf2a890d966fb145b3f
SHA1 c8fb1400cf60e1fe2adb16bf4defaf0b87aa97ef
SHA512 06803327e64e8c1f2a618e21131b1ef8f6ed93b282a74c2f10b1b7177ef2c117b4590259a87c9ba190ec946cd9c63d21c4df8ad5a17b40ae5d8d491d137f8fb7
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads