82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625

Analysis

max time kernel
149s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 16:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625.exe
Size 10.5MB
Sample260716-vd3ffsdt9x
SHA256 82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625
MD5 fe7e2b597a1ac3085ddc9f031727d8de
SHA1 bba7eb948f43ada237e629566d26667617d7cfa7
SHA512 109403ccb0fbfbe86204912c3a0b1ed9b58ec8201969cc88672e5961f6d784e325b6d1110562c00a66549a8217d115cfeae5240264fa15fc7a04306b9dda19c3
SSDEEP 196608:4GxzcCaVKlbZnyNzYNTx9Pe20/aVHkiu6E:4OzcvVKlbgFmdCahkie
TLSH
T16DB6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
700	82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625.exe

C:\Users\Admin\AppData\Local\Temp\82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625.exe
"C:\Users\Admin\AppData\Local\Temp\82e18b0a6dbb33706b17d39a635a790f68505afd28c6aba3a3b02f1ec7682625.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:700

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 4f3ac5b635424d7f07285be7aa66d072df51336c34000fb9c3e1e7b576a0ba55
MD5 46adb417438284c99bc92980a1f1821e
SHA1 a274035a020ce80e9ffd059b6c2d9fd53976877f
SHA512 349d045651d4ce9fc97765b6cc3e3333e6a8b3888b35a91c3a07e0e5fb2507d9658fce8df779d5544bc8c53caff55237052e384e5e0eef63c79b190717368f41
SSDEEP 96:K/ifU/fvfMfjD4kg0XkgGioHgCRRYzCzvz/3HUgH1vF+nuUHPHaNH5lHwA1HExHY:6CU/fvfMff4krWRYzCzvz/EOvF+uUyLl
TLSH
T10481E00179F2AD241799419991A93ED2CDC8F05AB8517CFE2BDB46922BEE7012CFF025
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 3KB
SHA256 7c32bcb4764a47a3fafe587263aa9985ad46b1d3e0880586f0b87a2c7f478832
MD5 2cdc95f030c03144e3cf447e2852566b
SHA1 e0957183086c905c73882ab2b09858f0a4f94fd8
SHA512 81f06d21d15956aa0abb578ecd79cd13d49e56f3ca076a08ce419e403b99008583029c112c666ec6c6e1eaca220086e6100cd02607394c3eeee9e6900fcb3fff
TLSH
T12581D101B9F2AD241799419991A83ED2CDC8F05AB8517CFE7BDB46522BDE7012CFF025
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 ff96b3647cc8241907dbd468f6ad23c2b8ca656e7dbcdf42e07fbd35d08cb756
MD5 f418d1fcaf2380b152f0e27374338d19
SHA1 89bb26d76da5c4ce4b44741de7a5f6b5e0e2bcbb
SHA512 933f8830e3c676aace7a1c06d07815a2546e9f258306b9129bbe869138b77d4f5b17d671c6166d27a590a8b60bad704e67670dd2b4e343f22a6e4e55ab0878a8
SSDEEP 192:6CU/fvfMff4krWRYzCzvz/EOvF+uUyLyTxEoDHtWElGMPLL6lZ5Q7/3qafaXl6xX:cHoTtuTEGENDw83gfMjxI4XPDGJA
TLSH
T1B3E18C0178B6A924179641D4D1A93ED2CDC8F02EB4516CFA6BCF42922BEE3056CFF066
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 91c7afb2a3111a6b5a48fe61665fab26f6bfa5ece8d71e8c554ac518052f82d1
MD5 5c3fdc2a4589c29d3659011be9c89514
SHA1 c4b8e70d4ad79fcbc0e217c05dcac17c9429f088
SHA512 bfff16d54cecb83ed256af0526fbf3bfe033fe3b8e0c881ca5f9659ae0ba440e0198e0d7f78bcf11f85bbc20c21f0ef78d875facfa89b9cbd6a58345d41c7a32
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads