658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe
Size 11.5MB
Sample260528-ppdnksfw2j
SHA256 658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00
MD5 c1ec0cb987687e53ce79769c13783733
SHA1 454d10e89c86a1b8d8f84d5ee12cf15ec6542aec
SHA512 2883a46b853b83c190c10d82a93cc320fbc8ba0d1686dacf98d54384a384f3cc93b6f408859d41e7b0e2dc786fcb467a6e4ed445ff739ee0d5314dc09f7e2bf4
SSDEEP 196608:QGxzcCaVKlbZnyNRtw5YNTx9Pe20/aVHkiu6E:QOzcvVKlbgbO5mdCahkie
TLSH
T150C6D086DB813129DD2A6A70153C3DAFD619BEC91B700BCB96E57C940570BC3193AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
99	2320	658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2320	658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe

C:\Users\Admin\AppData\Local\Temp\658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe
"C:\Users\Admin\AppData\Local\Temp\658cb8ee0d738c9b5ed11fbd3102525bffc45e6d0ba17674397f7cd2249cda00.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 492d2cfcf646df93c4c48e34a6e9606a327f5dee6f715e999f30a260f3cc461d
MD5 db2a025be37e108d9a192f55ffb35ce0
SHA1 0972cf5b518d23fc2f32e035a2e728bbb90a5965
SHA512 85b9a30a6592827f0ede07d5df1eda05d8464dda1acb891ce919c947a26bfb8b58472bf0b2877a32e0e0a9687f1da5f790c908622765b78df45b28d7c3c77450
TLSH
T14441D440FEF6C93AA78DE72A7A7308D4DE3475C06A54D1E67BE9811013C25222CFE976
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 c2955abf54c366b73a2229c6c035159b7e2296e59d97d91a6eb9bffade7132c8
MD5 8c263916449dfcc81767db1bd06fd4bf
SHA1 b43628090d3658ba3342bce4c8576e0eb3b189e7
SHA512 4c4ac39f4aa54811056fc46c25ffc0b18da2073ee67c0101867b9904394e539c050d52b846989967f58009680f8208438cf14e9d4a4773f2fda42d65e60ea498
SSDEEP 96:Kkfl0rKjB5C4Hu0zExmxLxzFHIeHboH0jHShHXFHsMrHE/DHE0MVHEJKHEODHEjF:zfl0rK95CuzExmxLxzyQB2Rah/g0fJ5p
TLSH
T18E916C807DF2C53AA79BB2B5BA771C54ED7871C52144D4D6BACD81101BC21222CFEAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 0d6c6f32cb090e2f9c3ab4fbc7dc6c8f62a6afd6a461e8a38a8cf5a49b45229a
MD5 c5910f51104ada3cb3b88521d3efa65c
SHA1 bd6c013979e535465a6a21a4354c664ffe83b9bf
SHA512 2781be52e63c6a71c0fe982b7ebbed47ba035676d9a088ee7a6290633e3c1a6a230623b5e74c174f3e96374f2ae8db220ca73a9d59b623c02382194dfce7140f
SSDEEP 192:zfl0rK95CuzExmxLxzyQB2Rah/g0fJ5OgjxoZN5yY3xMVvbYArrGpvdRkL/g0fJ/:z90rK9wuzExmxLxzyQB2Rah/g0fJ5Ogn
TLSH
T191227AC17CF2C53AA76BB2B4FA6B2C54EDA831C55144D4D6B9CD81101AD21222CBFAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 81c64fda31bceeb19104e40b255c1877e213225cb87da40401d55de9e100dc4b
MD5 c6c2de5c7f7207df9b5c4b5e815abd93
SHA1 7e59eaa558693037da53e458f0c41793ecdb93e8
SHA512 f7080df7acd87c65c839f8620fa28b9ac96858761a3d9f37e1afbf3e7e0e8479e9160a7c91452c514aceb987c0ef5c83911f8aa0941ec20f2cebdc4c6af4b3e2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads