3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec

Analysis

max time kernel
148s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 01:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec.exe
Size 11.5MB
Sample260528-bef43acv4m
SHA256 3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec
MD5 283304e92af06d2e14c9720d9eeafaa9
SHA1 be82f7ab611583613e7bf33ff5c1a477e65d7824
SHA512 18f8611219acf6f749469168e544a7362fcdac0be4797cd670e07f36d57d21b78420ac2387343ecb2a7cd66d502ae40af5f3f196819489ea5045c4131937ba7e
SSDEEP 196608:PGxzcCaVKlbZnyNi/eKlqYNTx9Pe20/aVHkiu6E:POzcvVKlbgsnAmdCahkie
TLSH
T181C6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2632	3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec.exe

C:\Users\Admin\AppData\Local\Temp\3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec.exe
"C:\Users\Admin\AppData\Local\Temp\3cfc0b7be8c51934e019fba6141355b9f3075e822704f77f70a797ef5ab84eec.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 609f1f73e07e6c88417a52a097ed6910a092babefadc0a48bdb99af93cdd116f
MD5 2c441d02438077b66ba0e9f8b5ef33eb
SHA1 5689d6a991ac25890cb7e4a0014056d7778da1f9
SHA512 aae876e14c8009454c29d9e72189225ba7f559c8da97886d871578a300e186ee33d5e631557829bbf49a8bd974b127647c63c29f1d5350b47846ad13f31874cf
TLSH
T1B7419D00FEFB5D6B174CC11F93B03EE3CE9A788DA52452E0ABEE595051C2550B8EE1A5
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 f8cca84f2343282c4e4ef7f0758ef9e214cc9c05c0d084eb7d588a5d593c8450
MD5 d6ec457523bf56ea142d5c920e07d231
SHA1 2aae5561f7b3756a55b6f5317653be7801d35afd
SHA512 9c2fbaf922073a9695d0cb445ad30bbc3bb7faada73f4d8243d43aae3c0ef11c568da2aad2e87c10896edf41c5339ca78de8bd51a60fb3dc7df25f7f22d62aa1
SSDEEP 192:E4paPyUdBGIaX08C+0MzDcK/BebC+pzDcK/ZebCD+bsEm3K2:+PyUdBGIaX08C+lzDcK/BebC+pzDcK/H
TLSH
T1732258007DFB8D3A161E81A9E6B53EE3CDCA380C502058D1ABDD995488E3550BDBE6F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 5478c7dcd36e903005207fe9f06e77f9f54c76484e6a26769a83908069f532b0
MD5 6155321af4fc8c5c57c09ad08c50aba4
SHA1 3fcca0b2c7539d6f7476f446fe184fdee39b5b81
SHA512 172129aa8f0a63131965d862ea440bbd31f3d0baf3c8839c4adc25a40da0bdbc02e1cd1961e6e3af72e2fa95b589ceeabd9b56e174c0ff842b1ff6dc2a76f543
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads