002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d

Analysis

max time kernel
165s
max time network
168s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe
Size 10.5MB
Sample260723-tkcypsfn9x
SHA256 002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d
MD5 1a621269e4fde84952f7fa1a0ea8d0b0
SHA1 cd1e70c810c2afc98154080cb2407db6a830c140
SHA512 5a4b95f33dea5b784e242aca179fc48b57fe0afc9bbc722e6f162e22888c8eb0b5a433449197fcece40889db2546fafe61a8154132559efe53c0abdc45e52d4f
SSDEEP 98304:46666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwws:1DtOsb+OnlIYefNTx9Pe20/aVHXiu6E
TLSH
T19DB6CF42ABC13525EA2A6A305D3C6DBB8325BDC91BF047DBB6E5785404716C33C36B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
18	4288	002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4288	002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe

C:\Users\Admin\AppData\Local\Temp\002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe
"C:\Users\Admin\AppData\Local\Temp\002b6e52f75dd445d43a163332a8c659332a5c5e1f788f43741b77be0d71fc9d.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 5cb92d4556ff31bf9f35905a2f85b130079282a5f460b4774e0d6e55e86f544b
MD5 81fe934123495548ab76d0486a85367c
SHA1 a4e59fefe6806b4feaa227bc746bbbb4847fcc20
SHA512 0af45ecdf23c7399725bfaa510c18e4fafbe9409dcdf2d10601bb373474eea0a14c418ca6f1558741e2d6856f2503ffa9ee996dd16529bd74ac80957ac0d160a
SSDEEP 192:hnHitAc9k5MEaVc8YeXdFZkT33TFAnk6kAgtsjTU:lHitAc9k5oVc8YeXdFZkT33TFAnk6jgt
TLSH
T1E102AA0839B6AD361A5642DCB0372DD2CCE9B44C605D59D066EF8C04AEEB0572DFF25B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 9f223105985d3601ed006e0c31755eabeaa72508d753ac42f8be06889699c994
MD5 f7614232cf16e2e2684409c79c19128a
SHA1 162a4611ee833bcae4aa8368b1348827f9addde5
SHA512 be7ad09b9a64db0ad7babc72b6dd7f9196e10e78e26a9abb92be59258a0de8fa25f535a6f2262af177f3c686611b4eb5f94374268775e898eb90f98ebb0b09f0
SSDEEP 192:hnHitAc9k5MEaVc8YeXdFZkT33TFAnk6kAgtsjT70:lHitAc9k5oVc8YeXdFZkT33TFAnk6jg3
TLSH
T19D22CD4C3AF2A9323A6943CDF0772DD28C99B048645D56D061EF8844AEE715B2DFF24B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 c0b8098c0e4207b2f3c3dfa858bc3f4c9730a39b9125596d7d8bd3a7c0d0669a
MD5 f7cfde229c435ad691abec75ce5b3ac4
SHA1 33e8c8a4a0fe0f25ec0c6eca3b2aa00cd65fb5c9
SHA512 e8a66f4dd233c79fdb3c25fff3b9f7ff794a92ee8356a3125f94cd62604a79d1d71289a7112e5b96ef31d1e03f198c0788ca4e68840bb5f366f46fb4cf3561fb
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads