afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1

Analysis

max time kernel
164s
max time network
169s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1.exe
Size 10.5MB
Sample260727-phvcraag85
SHA256 afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1
MD5 1abe1aa3174526e0a5b58e1adbf324ff
SHA1 872c12c605d51bc7024d3260e798ec047ada6e76
SHA512 988a1bd4786c8dbe339d4f9e0dd5ae9bb419b1d775c148255299d964005880eeb692571baae5513674b037da791989ff99b1868843d5eef7599c64a025a07a31
SSDEEP 196608:4GxzcCaVKlbZnyNzYNTx9Pe20/aVHkiu6E:4OzcvVKlbgFmdCahkie
TLSH
T1BEB6C087DB823125DD295A71153C7CAB8619BDC90B704BCBA6FA7CA405707C31D3AB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
576	afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1.exe

C:\Users\Admin\AppData\Local\Temp\afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1.exe
"C:\Users\Admin\AppData\Local\Temp\afe492c0cdf479aaa73668fdb6521e4650248c758627e03d073ff86ae8d144a1.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 08e997c140ba126b4db112be2feac6d4fb77db7beba609727e5fbd26a6e3a2a4
MD5 f9bc25238ac8e1adfeb6c514ed25091a
SHA1 a449d234aa7c01a00a3f8daf0278b97cafd4a025
SHA512 abfe6c654eb6626b62576915160949818e7fe613633840b0e0331f4e62714e60bfb9bf8317bb905ddbd78145ad75b568638a038cddd25e807c3ebfc901c13dac
TLSH
T1A241AC4AFEF54A26329C870B80B139A6CD64F1DDB65C9EE13BF50594038314229FE538
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 3d61c34443ab927090c5e0427733d08e98a8597b67bbeab9cd84f1c7bdff5bae
MD5 e7ebc2a224df773ec7a6e5c7b0649b37
SHA1 bb2c13f631cc327765910124ed9edd8ae91f587d
SHA512 25ef7f652ebe61d5d593ea1a28f01eefd1d983c8e469b54dc6f710ad0916a3ecd25513956e0c612630873d1905a25865069265351ddc9e4434674f97a64ea7b8
SSDEEP 192:7ofqk5Vryt0ADfGhR424dXIeRoD1l8dNkZzKU:Uqk5Byt0ADfGhR424dXIeRoDKNkZ+U
TLSH
T147F1898ABCF5863236695266D0773D62CCD8F5ADB1488DD06BEE01900BD32426CBF57E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 457ec9153f183a435f38d8472eb35ff10bbdffa7a1425179368f6e4ff9a6d055
MD5 4353e3bbf59fca5ed8aa3c25772a27e4
SHA1 af5bc57e72d0051523e2ca60cc698774a4fff3ad
SHA512 adb199c04192cefe09c5855468c4dce43d3805a1098f16c308d7b86c68dda584434828ca3defad63e55146d87e68f72365b709376174aae317e9ca1d64a230e9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads