a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe
Size 11.4MB
Sample260809-j2cddsbq9v
SHA256 a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46
MD5 5321cb66388b0a3444baefa663e1762f
SHA1 5795715fede5763d073a36f2532ab86f5c8be9bb
SHA512 11bae8129ddfa7a29d3a8701424425804b96abe2c6d0aee844d33cfff389b68f12dc9480ea932a6c4c75a0a31f1ba99d4e72873ba653abbe985d2a0d33c71af1
SSDEEP 196608:UonAPwAdQ8rR0/DNTx9Pe20/aVHXiu6Eds:UqAPwADy/RdCahXieds
TLSH
T1D7C6C046AB812225EE2A6E30593C7CB78725BDC957F047CBB6E9785814706C33C35B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
66	2544	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2544	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

C:\Users\Admin\AppData\Local\Temp\a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe
"C:\Users\Admin\AppData\Local\Temp\a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 1KB
SHA256 a6793d939342a25df1386cc1a7e1ea713472b63aa1f7cf967460a6b7abac9b35
MD5 debee09d9dc35e97512646f1faed50ac
SHA1 93d2a96a5097c39f94b1213b5e3aa93f6a7f20a1
SHA512 f9b6114d8fb989e27cda6e19f26708bea633f4e5cf31be39cc4d922967ea3cf0b36961b18408938a4b0b11253f43a5adb4f3ab337e3bed3318d46662cb1f8b86
TLSH
T1F341A000BFFA5A303B8DCA0F41730E9FC5247945F66E8AE577E7158463C7A612C6E854
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 7700e5dfa39a349cec377e28c94f57125fc126bee29e74b3e3d4434e183e7518
MD5 ab6c80c31c84e09f9f893f23968e73b5
SHA1 82831186de3da2aa1aaa80318e4509bd215b1d47
SHA512 6422f7d1da4b01fc1cc6bd0aac3e52ed260cb52969dd16735051a2bbf9f7111b6f077b2798e7d855d9ceb7372d12c3c1b62a7ab4ef1a7adb1d23d1a9314af0c8
SSDEEP 192:tTiQCyhbeNeIehFPE0x+AOsPx4Adq6wHLUWptmgzlQTVCnGsCaqjQ9hDn:gQHhbeNeIehFPE0x+AOsPx4Adq6wHLUk
TLSH
T1D2D18D00BEFA89303A5B965DD07B1E5ADC483A09F15D8CD1B3DB0180AFE76552C3F995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 c120e798520283f3b92d5d633ee227bfac9c4dec0beb21d9195da9954b2ec146
MD5 a3ce9cb97faf3e238a132512a5541e50
SHA1 87831c993299d6863839f1519c9dbc653af41edb
SHA512 e1cfea369996dae6cd35f154aa1a244bbb2a7203f51e46b21663eb028f70b6097b53616d152d053d40c550da4bf3f0b36434d88ce1f4b0fdc29e9d7744eda3e0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads