04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 20:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7.exe
Size 11.4MB
Sample260709-y2cfqaas31
SHA256 04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7
MD5 8ef13448d743c28c74ee48b7b1c5ca26
SHA1 786a7364ff07eca55054b97f8e5642be456b9176
SHA512 d12b905efbe91864360f4bc7671de61f635eb953c2a4db210bc3169b7a08f3a1f35b2aa206dc6f39e4d7c733a0b6274faed707ef34b40882584acc3f6c62fc1b
SSDEEP 196608:xPbRDhGiY7B3pOfmseN4NTx9Pe20/aVHTiu6ELEuZ:xjRDbYN2eNGdCahTieLE
TLSH
T1EDC6C096DB823129D9396A31113C3DAB9619BDC50B700BCB97EEBCD405716D3183AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3536	04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7.exe

C:\Users\Admin\AppData\Local\Temp\04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7.exe
"C:\Users\Admin\AppData\Local\Temp\04003ef6f3b99a846f5f4df08b9410e6c630c1faba82880da66e5ba1e8f37da7.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 7fd91012af848aa32ce8147c67fdbc7910eabbfda4610f642985976d201a18fd
MD5 2202e0195d656dd182c2160affc3295a
SHA1 081e71d949779d7dccdcedf34c84f5c4cf7a2b32
SHA512 80466fa4e3db9e2fb131278b9b0a6ab64b5dcfe526ec4f6acb756cd03305b6a6258dd0a294459a562e17482acd87ef323275db1e4c43a338ee84d17180f2682f
SSDEEP 96:KRP+IM72/l+BzrGXshVg1K131nJHIaHzM2SHi8HHeHUdTHEvOHE8vVHEp7HEuIHE:CWIM72NKOQVg1K131nis3DIt6vt8KpYs
TLSH
T18281B9683AF18534166A85D5A0FA6E58CCE8F426B44894F1F7CD13440FD3907BEBE4BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 596d9a00ee8ebc080b077271770db88f28b42f20fa9b41e5aece25963a3d8eda
MD5 33ced28a21811a0005b0b98810fa976a
SHA1 4895aab5c1153170a0577fa4d03b2d0f8ee55801
SHA512 d3ce5d260d124c94268ca60e315e608d98c681dfd5b2dbee38a64104aecedd38792c3bf195e616fa69b6f78046864f8fb3dcf84588b0f75bbb3f9e4902cc9f75
SSDEEP 192:CWIM72NKOQVg1K131nis3DIt6vt8KpYu/D2wM9mCFnQ0OyG/OZRRmhnlZ2DvI8hy:YcxVF5yMyvooQSvgOB9CS3sVlnUsEC/r
TLSH
T153027B543AF18534162B95D4E0BE6E58DCD8F42AB44888F1E7CD53400FD391BBEBE4AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 566636fca3f9d313cb683b2b4ae8abb59f39b397d416cc584036bafb968423ba
MD5 8203527c9f515f27341a8b7ed056f031
SHA1 b63563aa8ada6bd54740dd602358d5eaf8b9456b
SHA512 60cc0a09e6817f2b865ff3637e9ce39953dac46344520311baa90cab01f82681b1c8d2aee4f24297ed8d861332496cbbf685e4f14ab38674d65ad928e27f10f0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads