Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 23:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target 167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe
- Size 10.5MB
- Sample260809-3tv1baxepf
- SHA256 167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748
- MD5 bad24b519b56caeb07b584e0d570c3ab
- SHA1 769e510b13a44fb778dd4a22e8920af7cc6401ce
- SHA512 a0eb580b6d9864819703d714307bbec61ff6f0eea6a17a26652dafeb16da510d673d3860553fb903fe2437dec2df121c14e1fe7f5fe60ec982095078319ded0d
- SSDEEP 196608:V7DY7jLIZW9Edv4NTx9Pe20/aVHaiu6E:VHY7oZF9GdCahaie
- TLSH T1FBB6CF96DB813129DD2A6A30153C3DAB8619BEC547700BCBA7ED7C9815717C3183AF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 26 2420 167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2420 167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe"C:\Users\Admin\AppData\Local\Temp\167865cb3373ca396d14f3a7c7e6f429a17ebd5a6775311e1c5683bdbfe6b748.exe"1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2420
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 4KB
- SHA256 9866be207e36c96d77036fde77e169a9c2b7134f69df6a36bce742a1f03dd2d7
- MD5 6a3393ebd9ce2528e25dcb9a3e8acd1e
- SHA1 1c996274f6c2350ab018e082699c1a5a50f61787
- SHA512 d4ab80ed6fde9f14a970d21748ff2ee9aa2fd2f2f43de782a22d321f1821bfa5097a5e4654e1eae754999aab619e463e1ca3a5ced904bf260c2c465ca5dba509
- SSDEEP 96:KMXonZpeP6NI/HsHzTdMPHKH9HTGmHEGVHE7GVHEsoHEx3HE6JHEveHEQWHE1iHI:fYZACNIo055iOTFaHLX
- TLSH T1DD81BE01BDF9CD2D2F0F836EE46A5D74CC58715A60186FE4A6AA96004FCF1542CBF8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 6KB
- SHA256 07b92f80302c6992c6fb5dbc58c34195956b63cd978bd67a5e84574ed51da7db
- MD5 46b4f771346fe9f84fa0ede63c826a61
- SHA1 909e27d09e5fe9245bbce5da7173374340d7e465
- SHA512 d16ddd911547a3111e691dff846447e45d7d45a85d3ed1a415b0847bcac72e80ff40b13023a3298d20bd15d30bd9107ee8e0e1c06f255ff6d7da5a5b33ea66a3
- SSDEEP 192:fYZACNIo055iOTFaHL7z38QKzFy3taUI33i/yS:yACNIR55iOTFaHLspxOkxni/yS
- TLSH T124E18A0178F8C93E2F1F836DE46B6D74CC48A11E20186ED5A5EE96408FDF1146CBF8A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Yandex\ui
- Size 38B
- SHA256 fa30d796aeb53a0f4a867847a36bf8d9a66209eb2d24689fbf23619cc8c57620
- MD5 46e4bc2defd58a27f31d83bc8fa10244
- SHA1 0b7181b53bc6749b6b32e17a0bc903ff2d648881
- SHA512 cd0450e221dd2561c10fc9d6378cf5bcc1114588da36ac2b489a97ed774dde61d3fcc1f6c7fd79e01f96a27f5d79e6b3f6d243369b952af41cf9b592398741cd
- MD5 SHA1 SHA512