e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 05:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9.exe
Size 11.5MB
Sample260529-gp398sdv3m
SHA256 e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9
MD5 5af17be62e681628c2dffa8457a217d2
SHA1 37fe18182864de43533a5e5b1b480e61343dd0c6
SHA512 2d58cdbcfaed47691cd41c4f9480ef6c36284cf6ed838f5ef718c746ee70f134f4361a118e1d58273fcba792355d493c8c67fbbf218552f793b3d05c89df2bfd
SSDEEP 196608:cGxzcCaVKlbZnyNoQ2bYNTx9Pe20/aVHkiu6E:cOzcvVKlbgJ0mdCahkie
TLSH
T138C6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2632	e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9.exe

C:\Users\Admin\AppData\Local\Temp\e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9.exe
"C:\Users\Admin\AppData\Local\Temp\e651c64d69e0912a9af8d728024791f6cc4147f55c0b97699e8b5bd1f57fddb9.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 f9a61d3be9e2a9a39ca019320e1ff29d83dbeda0878e9ffb65e8b1fec538bd45
MD5 bce289fcc4e62855c7380203e1a60a0a
SHA1 a15644c95decc6534a4947571519c91844cce687
SHA512 b023a8ad34d470d851a8a3e070fd072e88a7338a52fd76a19c93a454327e8c244d49785b4e38fe5b691a75f7e83de2db49c3e747a5d3564d24fcc91b9db7377d
SSDEEP 192:YfiChE+YeYIMESmSLSMxP35GuwYgjfe5Rg0xfZ65NYwx7CIsPX8rJPIKGuwYgjfO:Y6ChE+3YIMESmSLSMxP35GuwYgjfe5RW
TLSH
T1C0F167017CBF8DA6765A5395F76F3C944CCA20C83444C8D173EAC2418AE31A8EDFE696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 17KB
SHA256 82a096f9251347ff04e1d5ca450500b0559af14ad199cabe65506832646b6fbd
MD5 22a54800587679f34458d23d52f0280d
SHA1 bd692969c8518e62903ac83d6f5f4ed44ac86c0c
SHA512 1e1721ead0a0f54808403187c16125ef5b32964f456feca7f1f4afe0d38ebd9c389d57ea4e113251bc2970cb94cc780de621876ed6fcedf108f4281b8980d7cd
SSDEEP 384:Y6ChE+3YIMESmSLSMxP35GuwYgjfe5Rg0xfZ65NYwx7CIsPX8NPIKGuwYgjfe5Rp:Y6ChE+BMNr+MxP35GuP0WnjRgL/FCIsa
TLSH
T1C382BA453EFE8D727B5C438BE36B2DD50DC93084745885E027EAC1815AF34A8AEFE196
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 20a7a73197972c6cfc30e7b8fa456782aba9f08daca00a2eab584173271cff30
MD5 ed96b4bfadf1f71366e08a5ba760e0c4
SHA1 4cf0ea1013b517be009bd6a70d768f7b2882dc1c
SHA512 031fbd8996ea9e55b4af1a68fb870d3b422fd8ceb81a6fc160fbac01c24a927b2a986f7b0e617ecdd27ec7098a7602b2d22650e3f1b8ec851b9765c1376a1f87
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads