7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe
Size 11.4MB
Sample260727-pf13hs1gpg
SHA256 7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0
MD5 6bb8704741d4bd38e8e45304b723562b
SHA1 5c2e3dff03aeb4b38a05b384b56ee05b6b7098b8
SHA512 9242eb6fba9be9bb834ae79777a763b41c35c9775ae60aa0e3f9d6763bd7678f85b0c711b02a9d92e092b5f6e6bbf0c81b8f2b2b44018871dfed0e418877cb33
SSDEEP 196608:NyIP1l4Nm90dP02leP2E2SxNTx9Pe20/aVHXiu6E:Nym1l4k0dP0pPRdLdCahXie
TLSH
T109C6CF42EBC12125DA2A6A30593C7DBB4718BDC95BF047CBB6A97C9414716C33C36B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
18	5312	7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5312	7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe

C:\Users\Admin\AppData\Local\Temp\7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe
"C:\Users\Admin\AppData\Local\Temp\7e964de4db18c8997ec4cebe1c23d66baca6366886e0ef0bac56e9e0b42ed6e0.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 7cf4ecf8a68c4364d7f9ecfacbff50c97023b816789ff435241f408871fe9e75
MD5 81c6065855a6e48041e3e06f39f3b37f
SHA1 f8df7bac3e3666a194d7fe117f8e74805c267747
SHA512 80d3f1e3b2b22af4767c0486a29fa15f9930c7479f33024b09d45e00e6cb0c4a3492e06442aeee678177978312c76d120ef2587e8423118d7ced880628c31eb8
TLSH
T19441CB85FEF48535624CC22B10611DA1CE65F8C9F69885E27BB628D823D34132FFE134
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 c0d40b161e9e68f2bf6de82ac65217c51a57bd0711bcc83d0d34a07eeeaa00f4
MD5 233b5efd4134b216a63a9b457acf99f0
SHA1 d27400c26404a4a1ffa264468716344ed99613cf
SHA512 25d1b991a26597f2b8d623c2185e552443ff6ce6d8edbe95ebd583256883cd8fb3586f81da6f237a0aedc68787344772e62460944b078145bc7031e3716df022
SSDEEP 96:KKam1gNQ40OzmHLHnBOHTHDHAd8HoHlVHeHoH4HdHyHiHj8HCHSHEyHESHE2HEyk:JgNIOzphBVhwrddoaiH0xrd/nfCFCU
TLSH
T19022AD85B8F0C535363D91BBA0663DA1EEC9B48DA18448D16BEF18C46EE31033E7F566
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 6766622e201e69a0d11633be276a58247383c54a4ec19c762167bd57798b6f8f
MD5 172ae92865a6759016306ce5ba8605c5
SHA1 971b8f1d983163b811519b46a96a1c5333cffef1
SHA512 a517fe0f459f51adb36ae7b9392f61fcaaf7eff8fdbef6d461d0ca02b57ffd8f85bff068be94aba040d79427e5885649a2ed72c0c628ba3d5978a3c3fc3e43d3
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads