cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 12:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe
Size 10.4MB
Sample260811-n82dbaselh
SHA256 cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f
MD5 20cf6f5a7972e4cd831cf680aba10019
SHA1 b06b66ef329d5ab1c3b161761a1ed258d01a0e82
SHA512 f549bf0439472514960361272654f19b73ac367392adc582a43e2c90a50e9f9a9f360c177e78c4f6347f957cb6415d05170b8ebb32eab0b11a3f36cc0b9f4298
SSDEEP 196608:NBM5kikM7umrtVfxNTx9Pe20/aVHXiu6E:NB8kikYuYtVfLdCahXie
TLSH
T1B6B6BF46EBC13125DE2A6E30493C6CAB4719BDC95BF04BCBB6AA385415716C33C36B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
23	3324	cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3324	cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe

C:\Users\Admin\AppData\Local\Temp\cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe
"C:\Users\Admin\AppData\Local\Temp\cf1b71562af8a9c0a8e92fcfdf4c405dae1ff16386cb8631d791f8e4a9f1a37f.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 98aaea79685217ab40071386be791b1bb21e5c6f6c7e1dad0221a8575dbcd0cc
MD5 b7f7701f7e45ed7dcd8d5d4281ccdcf6
SHA1 b97d862aae9fe52f8f4d28214e523826dce6bd5a
SHA512 0f2662519cdaa33264074e78149373a2640b43032ad85b38824c9b33db18828c565c4d65502496a7690677d518559f1f600284fefdde8686f3d8662e7567f813
SSDEEP 192:CANe5b5H5GDGraBLkHDbQoNff3AlNlMl/U:Zc5b5H5GDGrQkHDbQoNff3AviZU
TLSH
T11E025895BEA5C5341E7E769DE47A2E93CC4C786EB01899F1ADAB05800CC2D503FBF05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 10KB
SHA256 ebadbaee6303f2f3f0397c0e9553dd9da231cf87fdd6bd285fe2fe7f9c2d0628
MD5 7de1333a90841500d1754af6f090b782
SHA1 ccbccbbb9996e9ce8fdd9906aa51ef7d42ff7cb8
SHA512 c77eda1d07fffa5dbfe18829870740c8c80c61ccb411b2469bbd14701bb6ba5f293fe8afa18ec1252030773d5feae89d3f8ac7e66371aba95d87dabd1b8b374e
SSDEEP 192:CANe5b5H5GDGraBLkHDbQoNff3AlNlMl/ld5qkoyxb3:Zc5b5H5GDGrQkHDbQoNff3AviZf51
TLSH
T102224495EEA4C5342E7E779DE07B1E93CD48746AA42896F0ADAB04801DD3D403FBF05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 14KB
SHA256 292a962971be51a440b035b2fb684d9c24ec385e3c17af473da99a2ce0d35a92
MD5 6c9a6b99cde497fb933581e7abed3993
SHA1 8aada5357699d978ffb3f2bcf2e97e1cf89c5a77
SHA512 04e663df092ec5a0f0a66b6d8f2399831017b540094b8c01144c5ca479716438509816afee5ceca1d059019cb10474815e93e62f35974fdf4018bc85ecb71dda
SSDEEP 384:Zc5b5H5GDGrQkHDbQoNff3AviZf5mxe5v:Z+FZdhpv
TLSH
T14E625799DEE4C5302E7DB79ED1BB1E93CD587469E42C46B0ADAB00811DE29403FBF05A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 a59b48e95e6fe3fd792e97df58b09cca0c188778a216e87c69a880c269e9e0c4
MD5 0de1067216d387d7e39d13a594531edf
SHA1 8d9990f4a7e4adaadebb9cf225c2d54de274da6e
SHA512 f43649784bbc5ff1fd55d7e8ecb56f0e1f40b86b0d0318988cf9eab5d7d4575e5f686697504f3305ea94aeb53cbcd9365e4d15edab3cb20d553c62f77e5c284e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads