1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541.exe
Size 11.4MB
Sample260810-dayjnatxcs
SHA256 1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541
MD5 50a7dd7b45be5511a6a051c1b0d95581
SHA1 8ee9c4c396e2021e9e9b694565af36f8bf114197
SHA512 c0c70af0bb6276bd2cd014aac838f5c7de21189531037b4558f0164114b6d16903bd0d8ad7ac31cc7bb696bd80bf781c361bb7e7e92ca04a2751baa8028f4264
SSDEEP 196608:sS1yj4RzJYCAq6nIKZUtC/wZNTx9Pe20/aVHXiu6Ee:sScj4RzxAq6nIK0C/wzdCahXiee
TLSH
T11FC6CF46EB812125EE2A6E30593C7DAB8729BDC957F007CBB6E93C5414716C33836B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3352	1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541.exe

C:\Users\Admin\AppData\Local\Temp\1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541.exe
"C:\Users\Admin\AppData\Local\Temp\1a93193f8fe0fa77194787a37afa5e89e9bcfcc83cc39a5d40821c652cc7b541.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 02b63650b27716ec7178f0beb5596af755ef042053709b919f957dd0f6debce2
MD5 cf8427f6ba816ce1f87db396099abe94
SHA1 6bf99894176f75531ee822253999cbc2dccb11d4
SHA512 6cdb3da099ea59eccc4673bd952eb6efa6aae7839868d83e774ae2be9c58d0381a28430a2c1d560846f38a24ddd2655cf039d4c17d0ee707be31eda928e930e6
SSDEEP 96:KWl5rrRI/DMiPKHBHuPHgH7EH/O0HZHUVHxHdHtHmHPHaHL8HuH2HE+HETHE1HEK:hDvR6wiP29QSC3F
TLSH
T10B913B483EF98D282E1B429AB46B1E71CC94F865791458E2779D89D18CCFA04FCBF0A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 f60004a0b8ac6fa73a5e39c9950114a35c84e6a8eb21f54bf85a72e7d81e123b
MD5 5561fbf22799451c4ea9c0b4bbb87ef8
SHA1 890eaf60b266f2843a8885161771c3e6d0086710
SHA512 69ceb0442548e8575ca3a65b1955d158ff9d443777575defcee0c4f6f184921855522bb370a7d1cfa3cce11578b6635eefdfcbca36ac394601ac26c69e0fc1dc
SSDEEP 96:KWl5rrRI/DMiPKHBHuPHgH7EH/O0HZHUVHxHdHtHmHPHaHL8HuH2HE+HETHE1HE9:hDvR6wiP29QSC32e15JlY
TLSH
T13502FA083EF98D292E1752DAF46B2E70DCC8A469351458E2778DC9D19CDEA04FC7F0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 5cdfee0f05f9bd8791b53fa8f8718a7c20ea39dd876cbdb9dc1f5046f0923813
MD5 ab54b0bce522b21d62d494cf59ebf68a
SHA1 b1616cebdc52046a042f70886d7e1dcbedab3062
SHA512 9364ff7e3e310f21d2996744b11fa4099b979963e7e167b169f8f8bab6ce3c53e7485e2c5031fbb2d67c03707997bd147eadf3b5122d65c5d3cea3b3bdd703c9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads