fd60ed2d79b43c88a5427f52d5c9f1253f3ca8cdab3183767916c8a396b0485d

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/Yandex/YandexBrowserSetup.exe
Size 8.1MB
Sample260811-ppln7aed23
SHA256 fd60ed2d79b43c88a5427f52d5c9f1253f3ca8cdab3183767916c8a396b0485d
MD5 040a8d64c811a561190db464302b06ec
SHA1 711775c85f1c0a5e0dfc47b86cc51183e1ea25d8
SHA512 f10d5afc3794a35644bea91653779e18b8ae86d437035e0b5dbf549527cba200b2f27724beb7d219e45004824da635f51b98b207f0c9318ae500ed85b3057cb2
SSDEEP 98304:AMhP9yWt1FXkfPdNCjNTEYkpwNSHfbv0u5IhThw6Q1f+hl/hjY4+iafv:AMBi4NTxki0/oKiu1f+79YR
TLSH
T1CE86D015FBC65201FB262630253C7D7B8721BBC49AF88ACBD762688855717D24C32F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
53	4908	YandexBrowserSetup.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	YandexBrowserSetup.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4908	YandexBrowserSetup.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Yandex\YandexBrowserSetup.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Yandex\YandexBrowserSetup.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 f736c59686d4bfde6363d9672bc6fb49e39379ecfd82bf0a8d4bf83268bc09ef
MD5 8c84990fc1338d7dcb85980cda37b9b6
SHA1 52538dc6dfb9b1fccb5b6abb02bfb62210d0538b
SHA512 db5528935ef13d6361e343573f5cb153ae47a8645f5b21d94e681bd89bafff274219d89d8390e3eeb77b133c6705a75a0d78f7bf9e6142b50d6ea68f8d0d3d0e
SSDEEP 96:KaenQ2ee2gdTbH9HMwyPH7HsHkSHMHCVHXHOHFHXHMHJHJ8HgHkHKHHHEQPHwHsN:B42gdTytLFgtss8U
TLSH
T1AFF16992BCFA85342E97E6BEA0796E93CC88746AB144C5D4BAFB0D5018D3400ED3F45D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 8adacbdbe286b5687cb5cde08a3179817393750a3a79bf4135fcbbfc51490171
MD5 331771344d5d59effadafd8cc3fd3373
SHA1 9c86a5666e70f5b976ae9e16933fdfffcf7d4643
SHA512 1b21bea70b11ce6600ca5aeaf67d9432a758627b32e49955548781c954333e7f20c03e20c5a809f262c9c096e7baa64458ac19c6bcaa2b7ca66494e6cad04136
TLSH
T15341AD62FEEA46702ECEEA5F40701E93CC187096F699C6E97BF71C5411C2840ADAF41C
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 96a72f1f955f5c2419b645bd0bc9f97133ec5bf23b11b42bbde0d75d67965c3d
MD5 8723e0c1c2718da728bc2addaeb29c0a
SHA1 54e78329f8a51c2ccf5b29b9c8308cdfb90e3478
SHA512 5bdf6bc3aefe38c06da4eb92fe404de7216d9e85782a04031c2e1a7fe7a67214c18a5b5d435b3a34e1a6f3015823eecb1cd7f0fb8b7f37cc8c365fd406c62b00
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads