73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa

Analysis

max time kernel
149s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 10:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa.exe
Size 10.4MB
Sample260703-ms1leafw2v
SHA256 73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa
MD5 96d3ceadec008013caf820d166652ef3
SHA1 cc5fabd059e9cae277b1dc009019e175f9b2e93f
SHA512 84cc1bddb9054ccac8269eca5f994cafb432aaa2ff23ff0e4cc896cadd250bd8afad5e56a995d1ea3510d46941943283b897d0d63cb3e23a0a0f9bfbb851b931
SSDEEP 196608:eZyhPtNAbOy3wSVLNTx9Pe20/aVHXiu6E:eZ+PtNAH3wSVZdCahXie
TLSH
T194B6BF46EBC22125EE2A6E30593C7DAB4719BDC947F047CBB6E9385414716C33836B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5932	73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa.exe

C:\Users\Admin\AppData\Local\Temp\73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa.exe
"C:\Users\Admin\AppData\Local\Temp\73170bb2172fb4a3f0836b092648afb6a6c755429f5c33408779b80017534faa.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 6ec051d18d96952fa88f2848a691a7d7b54274bba6d8af95e538241c93db127f
MD5 631d353f203c515e9b622cae96f46ee7
SHA1 3f855398aa6715a4e8edc9e2db28b8b6a3ddbd85
SHA512 be840dfd655052e4993e24b16d2ca3d444c036b73e7ff25d9660c60f093d64f912196457f01426e846592312aa8fddb9b347d11b26a97a58f2f6e5a8913fa59d
TLSH
T1B74115847DF7C5A1175CD50B62710D96CD9DBD0BB4274EE5BBA61E8017830026EBE4EC
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 5KB
SHA256 e616b49d39368cb516aafbb3d38ba8e246bc4ea312ba9460e9fd97db4cc6dcfb
MD5 9b3bb8e561a842bdf185c9ea3eeea2df
SHA1 f89dc0faa653408d3f88bbf4126fc16524375c78
SHA512 dd08402a4ae802828354104cbe697ee00954598530886dfe0ff16c7783e455fa6783961f98fa7611f92e192f2eb2700d873832d3a3c10318dafd7961c2a72c63
SSDEEP 96:KRRpVBvXjk5hzIwn1B1k1T4HC/H9BYEi4wfyPHsnHf/Hq9yCHFEHPLVHcXHJUHOE:CRpVBvT2cwn1B1k1TnFBYEizft/ygw4N
TLSH
T1FDB18E843D76C9662B2DA167B1761D92DDCD7D4F601649D1BB9E4E802EC3102AC3F0E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 1e6706236b9e033e19b8f1a425ed0cb15f520ea4d5f40569c2762fa7b5d862e0
MD5 e38642ce0f08c54f595e32e7a4332150
SHA1 da8115dfb6909721b628ed242aa12056c77a4268
SHA512 60d2ac46a8803afc2fcaf3748e7ce562d68a2eb1a64879e7e741b61e9c52b7c86f13912beaa6c1c784b41c6bb88def1763873215f95007e74b0cf6535ab12bb0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads