7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c

Analysis

max time kernel
179s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 21:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe
Size 9.1MB
Sample260722-zzdrfa1sbw
SHA256 7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c
MD5 075d48bfa4a46b44dd65f580135c770e
SHA1 ba8baa0385e72c8fd556d7a412a08a5fe0d1b3af
SHA512 67e2321281b4c3baf3fe3fe0c4006e9bfc5a42a45ed7766012c65b5ea7d72344f18853f98af0119425b903a9982c6fad5d790d0726d95b4f171506e9bf1ac929
SSDEEP 98304:TcbGnR+V3U7bPeqteuHxNTEY9xFUkcVwNSHfbv2VHnXIhThw6Eu2:znWU7ddRNTx9Pe20/aVHXiu6E7
TLSH
T1BFA6C006EEC12501EF3A263022397D7F9625BEC45FB40ACBD7A6788815757D30836B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
18	6272	7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6272	7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe

C:\Users\Admin\AppData\Local\Temp\7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe
"C:\Users\Admin\AppData\Local\Temp\7ca9f3e45140661e51e059a299c915b16dd35e7e16682a1d9da784d11b3d1e0c.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 8724239882c0ee0b793cdb570a16f2b6b19a6654003ec1c293c757bb5ccccca9
MD5 0a6ed37854d07b557cd43afd73be7d35
SHA1 b6c8a7fb00d1fbc20b9c33d5df9187de55670480
SHA512 fc8bdf64fcd2a03bde07bded09afa2195acd37a45146cfc5229da5d336d3121a59d70a091d20e966826ebde42ae2d43535aee3ae0fe36fc15516569e6b510adc
TLSH
T10941DC04BFF80D21264D9916A6365BD6CD56B30AB438A8F9BEE441D4B3C30C128FE729
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 a0805632906b3e1b92fea7e5de18b9aa4d11c56b665c6533af42c66e8dfe7d15
MD5 cd8ed21dd1d7b4f57e686169107fc095
SHA1 28bef692a95740af26b0719ed69c78900657027a
SHA512 62350211287f85624988d55bcb51e5db7d1c18244fdef0bfe3add7fb80ddadf7828bd30ab19bcb0bf4c86162716793e34101fdfdc599faaa0740aa4ee2c78939
SSDEEP 96:K+XTKsUYSdhELHWHT4fPHIHjHLnHfHdVH8HgHeHMHHHeHX8HYHiH+HRHEHEPPHka:1jKsUYGhEme7F
TLSH
T13DE16C0439B45922361A6560E97F7F9ACC8AA31B70286CB5BED945C0FAC31813C7F767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 9690845f9c8b3146e9490f198d2e66d2a71d86cf201c8cd2a4e0c5a68440043a
MD5 7f006837c66c5786b120a57a5a5af81d
SHA1 141b715a3df1ae4089c9d16f9d67d32952df8be2
SHA512 b8dfdb22a43b0ca7058ec244afd3c37fbe913260d76655ada5b052798d273cbcaec2ebdfc40a931ed614fad0e076e005572d942da815e0b406b63abe00f6ecf3
SSDEEP 96:K+XTKsUYSdhELHWHT4fPHIHjHLnHfHdVH8HgHeHMHHHeHX8HYHiH+HRHEHEPPHk3:1jKsUYGhEme74u1KwzMe52
TLSH
T1DBF1890439B45931361A6564E97F7F96CC8AB31A702868B4BEDA40D0FAC31813C7F76B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 941ab9b51dc94c6acdf4badbefd4b095dbec15d93adc7e9a7bb87c84422a2784
MD5 559dc84f95f314143d5d390256ba5104
SHA1 e4ccc59057c48ad6b3441791d7224f1d5dd09197
SHA512 75a53018e5a4647b15d3a7fb6b43b3bd2b46f84d901f3b538d39accb2b64cc37feb649350744eea1633b62c38ed59a596bdbbf7340c8cdeb5dac73c379127cf9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads