e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe
Size 11.4MB
Sample260706-p5a8dsfv7s
SHA256 e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc
MD5 7d3cedff9dfbddd36398c28e86950702
SHA1 5c214467e3975d2527fd1530fa8aeac100987b16
SHA512 49d3a18e4a1e140b9b0e04807520d5243716bf5528d911aaa006a0390227baeb2a4c4911d508d43d645d9358bdcae82ea09c39f2f474d683e7f4165ca2d7a159
SSDEEP 196608:intBe5rW3RNdVcHTN+FHUoINTx9Pe20/aVHXiu6E:itBelWhNdmTN42dCahXie
TLSH
T1A8C6C042ABC22125DE2A6A30593C7DBB8728BDC957F047CBB6E5789414716C33836F4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
21	2148	e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2148	e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe

C:\Users\Admin\AppData\Local\Temp\e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe
"C:\Users\Admin\AppData\Local\Temp\e9fbcc5c01b787b4f95b2e91bb2794c85eceb2e36c7040477ba15acc40c656bc.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 6f5f8579a41ef7d2e2cbe6ff5a6cc0e44bfce3d1f11736c9c9d73eee65b0f34d
MD5 5f00201f39ca7d976d674543985ba0ae
SHA1 d686696c79f648bfe524d84930e29a10d6dbcd91
SHA512 a103e25162bded533cd66b194439b1e344ceee479b1215b4ec63befd5fa5b2b29b7e747b14e956322f1826905c027aab8497e02ad7148f43aac0154c1517f502
TLSH
T195412007BEF08DF5026CAE0B58341DD3CC5CF184B16A65AC73AA86C41282D127D6F0B9
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 9KB
SHA256 ccac246b6072286345f4b3c156bb6362a8b6ad001669f25992631b4ecf4c4126
MD5 a078b51a3523395ed20577de3ea32a1b
SHA1 baa1647f90b063eab63bf88412d51ccee482d9aa
SHA512 670b5529e84acba095570c673562d7e96d844944d114ebd26c8ec488dc8a86fa32c4b1fdf5abdcc76474c2ba20ccbc97881f3b0dfbbee9fc1e07c058ad545309
SSDEEP 192:C7IKMh+c9t+R1P1y1+2UEk8ypDuADWwB9zCmnP0ONdX7V9OWs1lok8t88pDuADW8:fqNIAT1hCGBRPXF1hCGBRc3gnjowzfe8
TLSH
T1AC12290778F4CDB6162A7AD4A97D2CD2DC8CE5182091689973DEC6C46AD2601BD3F0FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 12a7e8f1371c9421d387293822d68766940b5dde57ee54834dd08d7c1985f6be
MD5 31ef72821d8b8412f22a179e27d838f7
SHA1 d1573affa97b942d4f863d095eae3d0fd1fb29f3
SHA512 4db0c23fb2c80c384410c8bf4040cc64cd7915af2cf457cce736d54a2ea5e76534e9afa7829560bc073f8270a1d3b6dbbfd9168511af4103db80d546e39c3c0a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads