0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c

Analysis

max time kernel
148s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c.exe
Size 9.0MB
Sample260529-dlm73abw2m
SHA256 0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c
MD5 eb131296897df4ebba5c0a0f51eb77e6
SHA1 894adeb54ba5d3df86521a035e4a212ab1bebc19
SHA512 c1ce57967055c205f30667a469d24dafc1e5cb58fed5565dec1ceac129fd13267cc8aedebfcc51df6fd60465b50cf7ff3987738be287326a094183484aa7868c
SSDEEP 196608:ra7+605YyXoCr34NTx9Pe20/zkOiu1f+79YR:ra7I2y4m3GdCzkOiaf+JYR
TLSH
T10996D016FBC65201EB362730123C7D7B4721BAC45AF44ACBA772688856717D24C36FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5064	0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c.exe

C:\Users\Admin\AppData\Local\Temp\0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c.exe
"C:\Users\Admin\AppData\Local\Temp\0d49b28713bda197e83e83d3b5527cb92c43417830a98d8281e0287cf2fee46c.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 02b48510f9fd92e4b424d47d059841a5adee39c3a7d751dceec986c6d0508b9f
MD5 fd0165c5745a903d7fe83086da84ba7f
SHA1 ee64961fa6277f8c47332d375a9eb141e367a8b8
SHA512 0e8f7f95ea517da80f60b75d66d0c111e38af15376152ace3bbdbbda0ccec21c326ca9fcf728b4d6dead14a690fe1ace8e77c0979064b83a4509e7df7ef9aa43
TLSH
T16431BD047EF4192B178CE28B92F88FD2CD1C7095A9E945F1B76D4640E2829D13F9E0B4
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 271812827004fe6626edceea0a8799d4137b262dcd3851d05e5368949bfb0225
MD5 d89202c30c28c2d2a1596236844cec5a
SHA1 1cd848f7ea6f6fbc3be5ccb137b0bfb4e96b2c3b
SHA512 baedbde43e24a4990f66f0606954b64d3e7da5e9fe614fa6df6a6cda225821c4f9debab8b8a0d60ff7cb0d11925fe69ac4c3ab6127866b3d95568ab564e35b66
SSDEEP 96:KE5RN2CgejBJHHHTSHtHZ0H6MHeH0VHJHoHYHxHWH6Hb8HeHuHEHtHE1liPHtHZU:PBgejBM1gP9VsTHlCU
TLSH
T135126D083DF1893B271DB2D5D3FD9FD25C9D702928A544E0A1CE8A40E9C2E91BD7F1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 b73a2f1b3450bfd1f429eb447e4c4e01ceaad61dd0cd12cd9209452c8338d8c2
MD5 f507f5c1d4b5d4c1816af241600b1dba
SHA1 07e1c431607272068e6303a9c1a23fa134fcb2cd
SHA512 46b02be0532ff73a5f02352fcb2cfcbc859a2e37545b1eb91de422fa100ce304d8021067e7f59f92772dbad8cb438520aa33c3bd1891b2df376e6e7b25d9f833
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads