a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe
Size 11.4MB
Sample260809-j2cddsbq9v
SHA256 a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46
MD5 5321cb66388b0a3444baefa663e1762f
SHA1 5795715fede5763d073a36f2532ab86f5c8be9bb
SHA512 11bae8129ddfa7a29d3a8701424425804b96abe2c6d0aee844d33cfff389b68f12dc9480ea932a6c4c75a0a31f1ba99d4e72873ba653abbe985d2a0d33c71af1
SSDEEP 196608:UonAPwAdQ8rR0/DNTx9Pe20/aVHXiu6Eds:UqAPwADy/RdCahXieds
TLSH
T1D7C6C046AB812225EE2A6E30593C7CB78725BDC957F047CBB6E9785814706C33C35B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
21	2216	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2216	a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe

C:\Users\Admin\AppData\Local\Temp\a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe
"C:\Users\Admin\AppData\Local\Temp\a1f556e66b90ddf0937c31216a8280a105b1fc582c4666da00bdf6ad012bea46.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 d01bc33406000f1ec2fc9a53d18e8f4c9c53853f7519231b1f2588a7a01f0752
MD5 0f2dc86cc8f9d5df781a543302b025e5
SHA1 c2aab50a57b662496082989b58e91e012948cb61
SHA512 44be17bc4d5931059ec4005bcfd7480d14632094c9115e7b9a656651265a15fd36f464b05270f538790375d2decab7499edf5939e12e8d624dd6aa74001f3815
SSDEEP 96:KqKR6bQbJ8r9Q273rHkHlSHPH2HsrH+HuVHxHHHE7HEYHEzHErHEA8HExHEPHEv7:NYiQCe27YYvwoY+MsZgb
TLSH
T1E0919B443FEB86212B5AE1CFE4AADFD6CC493B8925348CD1B1E90905BBC34953D3E815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 5KB
SHA256 220f70f0e4c084cfbd01435133f276a8fd1d9e901e370d9b7b4625e535e2a120
MD5 6514deb7e67b8542796d67a91347e9bf
SHA1 30d8343836b5e9bcbfaf805d7846d59af8b95f4a
SHA512 0155470bf6e3d74ab310d34c82ee79664277459187f535274b64fa88fdaff41a5cdf1c31dbf4d49e24939310c444ed6964df1a33f0a7f187503ecab7fb91ec40
SSDEEP 96:KqKR6bQbJ8r9Q273rHkHlSHPH2HsrH+HuVHxHHHE7HEYHEzHErHEA8HExHEPHEvB:NYiQCe27YYvwoY+MsZgh
TLSH
T17EB17B443FEB86212B5BE1CEE4AA9FD6CC493B8925348CD1B1E90905BBC35953D3E815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 6803a9ecad87a31f090d2bd3c429a9cfcd7fbefc7f6e209e170566a797baebc2
MD5 c8f0949063f5cc355614b9b55e0809ca
SHA1 13f0a4ccd1a0b7130b38325322dbde6e5a1d02fc
SHA512 25b6ddbe02751725dd0470d094cd90b3d4d30f7e70c3803029c599f30e88663cb31c36e97380bdf4992cf85c558908e1d20be07c5f54955b5f86c37339133f85
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads