a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe
Size 12.0MB
Sample260806-vmxassbb64
SHA256 a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d
MD5 2ec760847cad7ad2bc5fe5a6534147c1
SHA1 4cd82a645395393e4e78c11c991d9f889f96a590
SHA512 e55a94eceba13eefaf4d14ea0c13a13178155a5516d5c36a0a51ab991e63f907c09a9e8e6e791a00f9055e9697f7712c6fe6fb5fb4a7975abac9294837b4e606
SSDEEP 196608:sitBe5Hy3RNz60zDVbwNTx9Pe20/aVHXiu6E:s2BeZyhNjz5b+dCahXie
TLSH
T11DC6D0569BC12525DA2A6E30593C7DBB8328BDC917F04BDBB6E5389404716C33C36B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
16	3304	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3304	a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe

C:\Users\Admin\AppData\Local\Temp\a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe
"C:\Users\Admin\AppData\Local\Temp\a2df71d9cccc0b00d3eeacf3fcb345dcdb3a750710a2afba36e771a3d9bec27d.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 c539f7bb59d0ce907740e99ca3f396fc39615692573eefa478669c732de8c2d2
MD5 23501255d27d9617a4d310cf961cf2e1
SHA1 e15276a51781da61872a8d9bc1c00782cd00a75a
SHA512 38abb9211feae8def925aaff736811af9d3a9dd692de65ba0e1c0faec9233459804759f25ea4999be27c5461c37cdeecc306ceb45d10449ba5a22c64fa5b1067
SSDEEP 192:pW0fK3U9y4KuhBHeFMFe8S29Vsb0w6WyRZwmjWxNIU:4wK3U9y4KuhBHZFe8S29Vsb0w6WyRZw1
TLSH
T15A227C4439ABC9341E1B9399D0BA2E925CD9366813049CF6B7EF82C06CE75107D7F89E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 045f182d90cd2dbc58e109ece01bb5937488eeb20f2dc311d2019a1d9d761db9
MD5 8e5d05ccf94d9100eb60584a7636dd2c
SHA1 cdb836d73f7a15a701ed773c2164af4ce9ca2351
SHA512 631e6dfc2b058afc29e902dc8b9cabe676c1294c1945b2f26b457daa6459e89c93c56b1703eb82f5dc227a9964e29a857c770c06b7adfeef6faa441565a381ae
SSDEEP 192:pW0fK3U9y4KuhBHeFMFe8S29Vsb0w6WyRZwmjWx2:4wK3U9y4KuhBHZFe8S29Vsb0w6WyRZwE
TLSH
T1FA227C4439ABC9341E1B9399D0BA2E925CD9366813049CF6B7EF82C06CE75107D7F89E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 41b8b08805d074a5ee3307596a32ea6c82bd7c9d79a76e5a5bd12783951acfc2
MD5 78d0769e8ae7ae1bb4abfe06384c051c
SHA1 9815a23cef28e923126add57344778242b24e049
SHA512 09f75cec4f9f55a53dd91801de3c7f772063ce977cc69a43c3a196fd5c5f6ff861328b001e47642ddbf6871e9a5cb86f3aa3dc78d3667e29001c24dfb1aa340f
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads