428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c

Analysis

max time kernel
150s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 01:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe
Size 11.5MB
Sample260528-bjxmlsew31
SHA256 428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c
MD5 f34af35c76d9c4e3e54f2496422c7829
SHA1 07741af8a71fcb43b86100df5a96ce685f32e1fa
SHA512 959cb1a022d4448cc235f3bad58b039d374fd68e5660d7ecd4c7ad60258858de2cdf7c17d81c15194721ca1a3fd857295a29a5edff49b095904a468a351b9ca8
SSDEEP 196608:EGxzcCaVKlbZnyNIXFe1xYNTx9Pe20/aVHkiu6E:EOzcvVKlbg6Fe/mdCahkie
TLSH
T1B7C6C087DB813125DD296A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
34	3112	428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3112	428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe

C:\Users\Admin\AppData\Local\Temp\428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe
"C:\Users\Admin\AppData\Local\Temp\428ebef118e2888d4b55c808300fa255341f2f044c77128447a3f57e55418d4c.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 28edae38f3f0b8b27465e6a29b4c134b8d61d757532ac36900ec5dbb7918ee9f
MD5 4d96e270b32059bf0369d086aa8db57f
SHA1 5664781ac107a9f3f6a29645324c463fca871e49
SHA512 ab3b93f051d79b88a5fa40b0cbdb0c3c262b186e2328ccc5dcb8b49c9d546514baa762c759a96d807761aed97955ebae9d3bbeb7421f7558b731e6fd0ec4a94e
TLSH
T16A41D115BEF78A2E1688C51EA260BDD1CD38B0CCB72545F0A7FE485499D34206EBD274
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 8a56745fb186617df499e3ad858e67787c5a37875d4720c1e3a0cd225dbaa5a1
MD5 254db948226b2dcdfe00f48cb1bc241a
SHA1 627ed7b4b1485aee8d098cd77ea006da3b4c94c1
SHA512 35cfaf9748e611f73d58d7a3f360e984294a596b3a60fafdc54f8d6de996a16eba1988fd22d9a9dd15081bed561a3193379f51f2ea548b5dee8a2fab85532e7f
SSDEEP 192:aCWtPFjuEddaACbosYpGddaA1bo5YMddaA1ro5YlW1nbuJTU:ItPFjuEddaACbosYAddaA1bo5YMddaAg
TLSH
T1BB228A107CB7C63E16594175EA75BCF18D98B09C652448E0A6EF8914ECE3110FE7F2BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 297727ca26b79929fc1be6ea404f80557bfc9c38b7f645f2f4ffd03167a25ed0
MD5 cf2be5198af6c42954ac13a989c5d64c
SHA1 4650c98a70663908fefce3655b2bdd38645837ce
SHA512 df9ebf449e512d7f21fe899bc7066b19fc2a371a0b59caa678ba23b92171b87d0c6246175fde8e40665b9e561060db7a2513bf10ca27cf7902d7bc9c14c87e23
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads