58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d

Analysis

max time kernel
149s
max time network
117s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/05/2026, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d.exe
Size 11.8MB
Sample260530-mphlesct7l
SHA256 58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d
MD5 0c43c9b5911a70707ec5c1dea4f02845
SHA1 7fb1f8ff77af204bb4ad61e2c0fd2be421c58785
SHA512 194145d875b9e8aa70defe77ddafd69ed709de45fb7d54343ce57c973696b4c91f39bb2a8f390f674d935c23af4784b2332798a19ed4e431d7086d488919a4d7
SSDEEP 196608:5PbRDhGiY7B3R60m6szrohh4NTx9Pe20/aVHTiu6EIEuZ:5jRDbYNBLorChGdCahTieIE
TLSH
T182C6C096DB823129D9396A31113C3DAB9619BDC50B700BCB97EEBCD405B16D31836F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5236	58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d.exe

C:\Users\Admin\AppData\Local\Temp\58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d.exe
"C:\Users\Admin\AppData\Local\Temp\58acca92b86ce40f1f65e2340991b7733c75e9bcee73f3129a3a6fefaf9d812d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 f409c44e3a282781270d2ba4a56015129bb59c4f9cf2ac864e82e1d79c6bf990
MD5 2d43962561b7a2d8a99cc65b0613b4e3
SHA1 284450b0c8ee72688bf1e84e275f152201d11b31
SHA512 7a97c74d5f7d40e44126a3a19ffffbfbde42b526c441259532a03ce320e0fd367c68f93223725efb577e1415a2968a51a862956f709c81f2ce49a442075f0f0c
SSDEEP 192:1OvM/pVcJRKHXYxY0YHEyx6/YAu7rs0i5FqknuwM132STXZdqUZ6B4Nb/YAu7rsY:1SM/pV3HXYxY0YHEyx6/YAu7rs0i5Fqk
TLSH
T15B124A003E7BC635B76E49A6E36ABF646CCC31342194989167FA84E84DD39367C3F05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 745ede14d005a34f211880b5bb97ec5ab2b7771022d962ae41b508eae5f6ff19
MD5 7ae22a3a20c518d184674b3a9a85feed
SHA1 2eb0faaf43e60f69377dd93b8bd3e08db3954dd1
SHA512 e30e3fb1eb1e8e951d44926ac9fa0c7972bf2ff964165b9a7cb7cb5952b207e227520496f3449735726563c36d0082384f521b1878c1b77fc1dd3858e7074e54
MD5 SHA1 SHA512