da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c

Analysis

max time kernel
150s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c.exe
Size 10.5MB
Sample260703-rdb2qaav9t
SHA256 da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c
MD5 1299f4fbb02f1c3a3d67f64326e6079c
SHA1 079f7395c8a8bd4a3470e2b38a628b6373108f49
SHA512 8650c197e300501649e810792336488e821048c5e24d3e8a924f822c6c5b9322d41e43e1902a116fd3ebce994ad01869d28d09f001f89a9f0728e103ff6c06b1
SSDEEP 196608:4GxzcCaVKlbZnyNzYNTx9Pe20/aVHkiu6E:4OzcvVKlbgFmdCahkie
TLSH
T111B6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2828	da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c.exe

C:\Users\Admin\AppData\Local\Temp\da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c.exe
"C:\Users\Admin\AppData\Local\Temp\da83c1e065b52fb650f07a6b0f4d3dc4bf04bc179f9eac0d7a1ba95422fc560c.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 14KB
SHA256 81d27b0ed05d9ea210651624cb4eacaa12a700025d93d8b707d9c765d2cd55f4
MD5 13c32c7c0437170b028ce64830936107
SHA1 a857174242f773b0b09dd8d50bbd1ec34f1a0649
SHA512 c95b101671cec35737accba945bcb7df85e3781b6ab1e0b122b04bc8cc11e62b79b4951ac4eb29a1d024e96989ecb776f512de4a32d2d5c5e2e8fa56f439ed95
SSDEEP 384:Q1f6WY2dsljrjWjKPdCztnJBe7J8+L/FEclYKXrTQnBXW9bLzFGMzB2JZ+2/EEsI:SCU
TLSH
T1E862AE486BB6C5303E3C615BE4B71E938F8AF05564180FB2EF9E5650A7D3142AC7F0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 fa4b435d9ffb941e942a4d671388ead4e12c4cafffce06f21868b9f494220a54
MD5 b4b15c92d366573bb4b5cfb13a81f34a
SHA1 348f2a3d741e2151ccb2b9076259c55aa2cf98e4
SHA512 a040f005b19aaa2cd32e0430136d03c3078895f158b964ba5012744bc6e10438c3123cf9d8a634b2528e19d1dd76ac345672a90c8edd9bf1afe4a117befd9ddd
MD5 SHA1 SHA512