7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719

Analysis

max time kernel
148s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 03:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719.exe
Size 11.5MB
Sample260529-d6agpsct3v
SHA256 7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719
MD5 e69802f2a52c4c25a389f3d9f684981f
SHA1 d067074f55de84478d0b409d28d95e5042e954f8
SHA512 85fdb73347fa84cdfbed2c59b121c1742a65a04efae96d4b995e7870a03dfdf2ea20bc807552ed0fa493b2c93e1be65e0193427d7dec6ec9252bad7fa5122234
SSDEEP 196608:cGxzcCaVKlbZnyNoQ2bYNTx9Pe20/aVHkiu6E:cOzcvVKlbgJ0mdCahkie
TLSH
T1EFC6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1448	7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719.exe

C:\Users\Admin\AppData\Local\Temp\7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719.exe
"C:\Users\Admin\AppData\Local\Temp\7cd7e4bef4860510e215ba3db217aeb55d127301501d4fb04151ee0c8042f719.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 c60a887e11c95fceed5f036e5d1874af88204ea0901d5169706a6a8fe4a88f17
MD5 dc623c77b0b919368c5846d2271c0218
SHA1 d202537a825125ac6ceae5a92c10b4b6247b5ab0
SHA512 3f78ce1af6bf0ccf3ec16908862ef1881797ad07cc84cd9466fb0212b2d580fb2fe1ccb6c0e14c182fa7c15549327a23ce340266d7b1a83c0a9d408159ff16ef
SSDEEP 192:CTwfto7MIHnBu/JdokMIHn6whODcGSVVgQhODM:Vfto7MIHnBu/Jd3MIHn6whODcGSVVgQR
TLSH
T12F126B143CF08E391E5B91E4D3ED2D90AC88B9781148DDE162CFCA108AD7521BDFF1AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 f9feeb3b1ac57ee314ed1f8d063a27dd37de0450ece5cecf804692c76357e091
MD5 0daff5ada372a2f8185ce5e3d060bcf5
SHA1 b1ec1ecc9ad4ed38948b2deed76c238acfe4bf17
SHA512 294d5f391ff0a2ac5a50a2593f5c13753842158ebc3489752130bd4e66694bca1a892827767159910a7a4cd9201682aff765a66bf636d244c57536099dab8054
MD5 SHA1 SHA512