c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907

Analysis

max time kernel
151s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe
Size 10.4MB
Sample260809-3tvpjsxepe
SHA256 c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907
MD5 63e8a8db856ad7b11de90c30107d2c9d
SHA1 f963351164fbe5fc3f810f708f5e6e153b38366d
SHA512 eba50c0def721131467bbc076c897b8c6d0d9abed70a2acc9c3968a5fec186dce8fcde76275131ab8d8cf5c4d34d04e8653f057110d7af4d40a92ddf8ac9b912
SSDEEP 196608:NBM5kikM7umrtVfxNTx9Pe20/aVHXiu6E:NB8kikYuYtVfLdCahXie
TLSH
T154B6BF46EBC13125DE2A6E30493C6CAB4719BDC95BF04BCBB6AA385415716C33C36B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
14	524	c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
524	c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe

C:\Users\Admin\AppData\Local\Temp\c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe
"C:\Users\Admin\AppData\Local\Temp\c8e6a5da4db24726b68a6544b7aab84bf057c5eb97b39fc3f242af33077d5907.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 0158a634c8cbdb761c1713b31bd969ebaee9b54930d9fcbc379681da44a2cfdf
MD5 f1ec9d0279acb44fadd83d4e8553bfff
SHA1 23c8aa18cc9a217e93f852ddb933d67010c65250
SHA512 8aa6fc6569299c7369d11c387464581bd5b9576d4e1d9d3600c6c594d80e3182b527cb68509079d8c4faf7e24dbc80bd71288f47730886e86bde5165ea27e59b
SSDEEP 192:FfHr/vFeu6mk4cEE7m7L7EA6r8O8XaBO6l3yoJeFoLldAIZASlJkPC5D1qhM6LXk:Ffr/vFNY4cEE7m7L7EA6IRXaBO6l3yoB
TLSH
T1B502BB417CF8C53D3A6E8399E46A6D99CDA8308F60589AD4AAEF1D000FC311C6DBF55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 d3fb00f7e9232082ce369ed06bd74db9988ed67bb663f9942bfbbdd1b16adb4b
MD5 50d8c4d8033313e91703f5fcc709b38f
SHA1 b53af831eda9004abcbbc8581e8f3a6392ccfc6c
SHA512 597e9950c34d49c80d532b4d64062ab7cfa26473d88820822470b5d52fbb53d71cf74fec7059559d193dfc4f9b04ba28f5ed8fd2a02518167e26de54fdd8857e
MD5 SHA1 SHA512