62e337896c7eb9ef1c48e2131660953fa6320fcbc07600fefa7dd71663d4d1b4

Analysis

max time kernel
151s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Yandex.exe
Size 12.0MB
Sample260806-pm2bvs1bjc
SHA256 62e337896c7eb9ef1c48e2131660953fa6320fcbc07600fefa7dd71663d4d1b4
MD5 903c712bf1c5bcd20409c3b08985723c
SHA1 75959d0da1e7dade5ce16b9b8e4453a7534e00e0
SHA512 f7dbc0fbb7db31120e8ccbfa6865241390472bdca312d9eba0a4739436c709c0ccb0e4106516ffd0a6a654e05f6e581d1b6de94beace0632d662540b73971a09
SSDEEP 196608:Bhm3pKXxFaItjlNnMsJFkNTx9Pe20/xciu6EE:G3pKXxFa0ldMMqdCxcie
TLSH
T1C8C6D187DB823169DE2A2A71153C3CAB9215ADC94B704BCB97F67C9406716C31C36F8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
15	4508	Yandex.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Yandex.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4508	Yandex.exe

C:\Users\Admin\AppData\Local\Temp\Yandex.exe
"C:\Users\Admin\AppData\Local\Temp\Yandex.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 f89cdce8f8a136754b318e2e8246556a8e2ff445b6c084c304064605cf3daf13
MD5 9bea52a254fcb06c20ba82bfaeb7ea4b
SHA1 b5b34ec7c0c9077a5905676e6480e371ab22da2e
SHA512 e5e7d8af9cea2d9f49e3f18ff41b4fb18a9f39e273fbbcdb31ec03bcb78bbaf7b35570b9683ec21e2659e981b5812ab0aee3879bec9160f168e45d46a4e62936
SSDEEP 96:KLPrgdVHuH1+HE/HEgHEprHEPHE3VHEIHEWHEiHbHAHgHo8HrHjHFHiHiHiHHegh:wjgdOc3qMi/1PYkKdTtQqcamBPxUtFU
TLSH
T1000247C979BB9928192F815DF87DBD54ECCEAA28204C5ED5E5CD88C438DF1007E3E85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 efb92ac4d89eab41e859f608d998ebde065ef66b9544fc3913c3ffca3d9e4f22
MD5 9a5ac5880c35d9effe83c69a370a1ca5
SHA1 8413c4728cc2efcbf5f0c37e62352dedb2b0f06f
SHA512 06f961734bddae76deb0f05ac306b0b31c558cf86a0f95ae0801bf9f9c0ca37d66a1b572c1c384cc173325a7cb5dee94dece71f5a5ae0566130987026e737909
MD5 SHA1 SHA512