698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6

Analysis

max time kernel
149s
max time network
144s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6.exe
Size 11.5MB
Sample260528-mdbczacy2m
SHA256 698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6
MD5 1ca4e1ab93cf36fee033f01a25668067
SHA1 873851d8d3ba5dc6134e6705dda709d59414496c
SHA512 0bb4b13840e795d8e4022b5b9c4dfd38de0702c8e9e248fc1925eeea02a1dea663449928bbe2ade1c14f27d371779583c005cd43be1a443b5ee3d711ae986ca3
SSDEEP 196608:QGxzcCaVKlbZnyNRtw5YNTx9Pe20/aVHkiu6E:QOzcvVKlbgbO5mdCahkie
TLSH
T1A0C6D086DB813129DD2A6A70153C3DAFD619BEC91B700BCB96E57C940570BC3193AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1028	698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6.exe

C:\Users\Admin\AppData\Local\Temp\698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6.exe
"C:\Users\Admin\AppData\Local\Temp\698a60918a44f49c5f58ea017ee71f47c6c7cfa4989c6a578eb6038f641bf2d6.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 28b63d6481090081f8379ff8de5e4349d699411eef132ce4aa9c6acfc5efbe93
MD5 3b734f9b82ba56e3bb5d111faea44d83
SHA1 76a8ef6cee77a067474e0c47a4057e5bec6a52c0
SHA512 7138a49247e1589bd34e835a4ba9592d4115ee1d0a4d1f2a82208d7551b70cf283fb5c1e4b233972558517030186d1ef84dd14126498841c21390bacc5a486ae
SSDEEP 192:q51K3944T3dOT5Bc344T3eOToB044T3kYVenZLc067WWU:81K3944T3dOT5B444T3eOToB044T3kYW
TLSH
T1842252857EB28633371A4394F3696C60BDDE200A215C49D1B2CE9274FAE36116D7F1FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 4810cec6ad9ace4f4579eb5ecc24a3667bf5ae5d5de119a28c311a9e9293d88b
MD5 cd0d8550dc3e36beb5ef36cec3ac3bb1
SHA1 931e53cce017f0b6917657954c6bd99fa2d61d2b
SHA512 708be5fb9fee86df47cbd2c1e40a39347c76bc410a03a8b175af2fbeb5b5895143ac58fb2c2f723828498605867d496b23e2f3e8b7b6ba115b3e7c2cd36891e5
MD5 SHA1 SHA512