93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 04:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f.exe
Size 10.3MB
Sample260708-eyaceaax5s
SHA256 93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f
MD5 f3408286b784536987e4eb5f0b1ebbaa
SHA1 737b5ab6abac77d87712916a2cda19fe62ce6d7e
SHA512 2e4eb638d652e6a4155dcef8573ebfb5bb91bb536536fd7703de300f4d0cab46e9d9f8b15a07423a9b0bb92958bb7fd99d4c962572d611b516ea901a6b984d8a
SSDEEP 196608:rPbRDhGiY7B3a4NTx9Pe20/aVHTiu6ENEuZ:rjRDbYNqGdCahTieNE
TLSH
T1C7B6B096DB823129D9395A31113C3DAB9619BDC50B700BCB97EEBCD405B16D3183AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
560	93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f.exe

C:\Users\Admin\AppData\Local\Temp\93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f.exe
"C:\Users\Admin\AppData\Local\Temp\93756f60be22472157ed91c8ca2531cfabdfb56bc8a2c67d6b5fb037d497499f.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 84b87a1ec46a4df5fdd362dd54f2a34a0de36aac8fa2739514cd31bb2b7d1dd8
MD5 afefdf6e9b7cb088784f7168ce9df693
SHA1 90523e69acf4cd84f3ad2d7ba54a363180486f26
SHA512 0c56ad661e58497534d0865fbad1e29981c2f7635ccd5f59683aa68ae88f14f8ca525ee942d1c2e920a695bcc48bd04ce1bcde296303f36981b93e1f4e22bd14
SSDEEP 192:CUIfalMiTP+dG1U1J1dsyl5mCZHP0Vv28+p8uDD9wA9CCwnM0SAx3x8xkx/xRxaI:ZdWboeTOKxhcbM0g6/5Ww365BySV2
TLSH
T182F1BE847975D6303A5BB258E0353C52CC8CED89D4005DE2ABFD4294AAE3202EDFF4AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 43b18f1185097ead05d3dd5241f81f624844c86209c9a8e65151ff868668e770
MD5 136b8fe1e873940058f0ea0e1e79295b
SHA1 ba59ab87324563635a6176d9d69cd2be00ffe45a
SHA512 61521e827c549a434ed537cd6e37aa6c6da255b7eaea215bad830263083256b6502edfc23f01ff4163d02ef48c9da3dfa294fef319517a8b10feeafc9b6904ab
MD5 SHA1 SHA512