a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef

Analysis

max time kernel
165s
max time network
168s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 09:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe
Size 10.6MB
Sample260730-lnxtaagk5t
SHA256 a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef
MD5 87f73b6486483fb849b425c326153983
SHA1 5ec86866b783c3433de4defd95a9f249424d6d59
SHA512 12bc08076e059ac4d2642da794f8616ad9fae07cc72558898c3fca089e6b5596e6c9bf2a75fbe7cde10f9be1018bbb3dbd6b78481bd65613230370f821f97ab4
SSDEEP 196608:DEMkvSSJ7PbDdh0HtQba8z1sjzkAilU4I4:D+v5J7PbDjOQba8psjzyz
TLSH
T16AB6E025FBD79305EB272634257C7D3B0720BAC41BE846CB52626C885675BE24833F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1988	a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe

C:\Users\Admin\AppData\Local\Temp\a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe
"C:\Users\Admin\AppData\Local\Temp\a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 75efdb5913d7a283f3064c0e005516eb579c9101c036d338202a83e9d2d289fe
MD5 e893c5d79bcf8e38333862041f5384b1
SHA1 24cc8941e51182ebb4c150ab4ef5ac105c2ccdce
SHA512 2731808388784889aa5a95f54f21aff2be81145c4e4d37d898742581186a02cb6cacda47ce234587f93e965685ab1b590ee28664575e069732680bc6bd1c2565
SSDEEP 96:KmMRuMl2qqPoT5HqHkcEOHgFHn53pKXJYAvbNyOYwRoO:oR1QoTaEOAFH53pKX/h
TLSH
T1FAD15A021EB72AD14F4D30E2E9900D8ADEE8724F7468D890F7671A607786606FFBD1B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 63d681641127708c0d728ecb41f934f51111ffb4e5d21fa585a28aa9463853a8
MD5 6f7bb72e459b69bc31a3a4062e25c44c
SHA1 c5a878c3a208c13657a81e9c96a1bf7de976c7aa
SHA512 ce4af0876a8ce9e0cc006eaee3bd87b0580f2d4bc1e1ba7288d5f639f261be0d2011bae18259341725c1adccd44b8f728288f7c8c4f6f5243a0f0f83de814101
MD5 SHA1 SHA512