a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe
Size 12.0MB
Sample260806-vmxassbb64
SHA256 a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d
MD5 2ec760847cad7ad2bc5fe5a6534147c1
SHA1 4cd82a645395393e4e78c11c991d9f889f96a590
SHA512 e55a94eceba13eefaf4d14ea0c13a13178155a5516d5c36a0a51ab991e63f907c09a9e8e6e791a00f9055e9697f7712c6fe6fb5fb4a7975abac9294837b4e606
SSDEEP 196608:sitBe5Hy3RNz60zDVbwNTx9Pe20/aVHXiu6E:s2BeZyhNjz5b+dCahXie
TLSH
T11DC6D0569BC12525DA2A6E30593C7DBB8328BDC917F04BDBB6E5389404716C33C36B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
41	1984	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1984	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

C:\Users\Admin\AppData\Local\Temp\a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe
"C:\Users\Admin\AppData\Local\Temp\a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 716f8ae1e2e40630d315b6a3611c467b516778a5216bab8832d8d8de17199f1c
MD5 5e577d019ab79ce2dc41f9f5e3e3c139
SHA1 36cd0a462fa318e439f0ec7c82a2855898a178b5
SHA512 eb8b21a4929e2da1dc4764804b189b2a05250aab3f8d4439c36995b68aa4b13b33ce139ae5db64cad17b9e0f55de2888b8ae0ac321f1e671e5ab89e5a531638f
TLSH
T12841CC047FEA49B03F88B96FA06C1E86C83AF1846615CEF2EEE561E075C36006D6E194
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 8c4230280c758d7e05322579805a00f46ad558ce37e54e302cbe180fb1777fb0
MD5 71631dac8d1a80c91fffd7207ce06097
SHA1 bc1bd69bf645d753b6d262c23a0a417194fa677f
SHA512 921ac57a4c2567610c692711e2e3b24c05ff54fe2d287b8f45daa62b6fe6066ac28f2faf4b90b55779c60771dc874f656f0c78c2144d0184b7caf97c61ac75bb
SSDEEP 96:K/i30eENIrHjHtmHEsHEK0HEr1HEDHEBVHE8HEIHEGHEZHsHCH58HaHsHUHrHnHf:Mk0nNITTIGgwD/FyYEde
TLSH
T187A1A1143BE689603E9A759AE06C3F5AAC7EF1441515CCE2F9C992E078C3204BD3F695
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 413342df4fb7894ba67ffbc99d6e1dd36a92d6090e6d06f7435c5ef7258e20d1
MD5 15fc74447acbb444601617a1acd0e4f9
SHA1 7539c0d0eb719f94ed2df85c60fd9df1ca46f911
SHA512 3dfc4605f8104de7fc61c6660fbfcdd984adc78baf2a9536b7a72334f116336019c77e5fb8a04c76249e26a1646ff3904a1e8ca546cc9c6febe6987c78dc837c
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads