92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 16:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe
Size 10.6MB
Sample260805-tz34face53
SHA256 92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80
MD5 4f1a087bcb663aab2a06e22bb42fbd0e
SHA1 b5b851d7798ce23c3ce3c0cc0f9b1542acb02bc6
SHA512 688f9cdba16f5a4d985afa613daad87cfae37e6f729b583fdc6565423178a7a442854cad3d82b9adfc0b198a2703c5aeaa18e5c20888ff95593f720795ecb461
SSDEEP 196608:Ch8Sp69gDGP6X+48PkBl6eNTx9Pe20/zkaiuMlEu:COSp6S0kBl6wdCzkai6
TLSH
T16EB6E102EFC52505EB2A263016397E7BD721BEC41BB44BCB97A67C8855752D24C32B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
23	5152	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5152	92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe

C:\Users\Admin\AppData\Local\Temp\92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe
"C:\Users\Admin\AppData\Local\Temp\92305b6ff794f48d8fa85bfef90ad11b31b37bf6b9e92b3e6b97436e1d3d2c80.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 5KB
SHA256 3ae80455decb8be06b2971dc1187638bd7e190a76beaadcb1892d7efda7dab76
MD5 eae4b34a3045e3734f5e40bcb24af8b5
SHA1 e7cbb6660609697f895e6c3e9008a105b9b027ff
SHA512 6e6cb5616d9e8b7be6badd27f0fe627428b8e8abdbddb0f58ff9adafec68d36a34df5b703aa508990a0cafa858b4eab010e59042653ad4240fe62b920fe7c071
SSDEEP 96:K1JXEM2i1dX9YHHXHn/HQHKHlcEH5HTVHGHqH9HcHnHbHQ8HlHNHlHEH/HE7sU72:umi1J9YkL7rhs
TLSH
T108C182033CFA45385E2E61DAA8B71D509D56318AA514CCE1A69F0AD8DDD27303C7FC5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 44620b9607f0ba0d97a3b5547b4bd61d4db526510c6a93aa8f2dd5a5185d7e7d
MD5 d2c6446daa8972dd62a8997ad9166422
SHA1 e774d60e590819aae01bf6ff5e18d858f7564855
SHA512 a4f2a8670e14f102eeac4a003c4dabad6a0c64d9dc6f63d051d8c2b2f090972c51a55a70adefd4002854bb7f801102b042c02193778fb37358636d87532b439d
SSDEEP 96:K1JXEM2i1dX9YHHXHn/HQHKHlcEH5HTVHGHqH9HcHnHbHQ8HlHNHlHEH/HE7sU7Y:umi1J9YkL7rhS
TLSH
T165D181033CFA45385E2E61DAA8B71D509D5A318AA510CCE1A69F0AD8DDD27343C7FC5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 3f101dbf2262a60b8a118f614b78efe8f0ce09902ac893889e680ad44d5355cf
MD5 ab7b0ab6ebde45315eb1d4ca0307f93d
SHA1 a2f9983aada558e3beac8776b13c3c90de26de24
SHA512 69fe2844ca42627e6cc3de9f8815aecd1d4e0332ed5128aa75b32255b8cc6b0f5a11168f04994fe2f22ba5359030c182d6e5d62c5f4cea4ad3e4892e55ee9425
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads