fd60ed2d79b43c88a5427f52d5c9f1253f3ca8cdab3183767916c8a396b0485d

Analysis

max time kernel
163s
max time network
169s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/Yandex/YandexBrowserSetup.exe
Size 8.1MB
Sample260811-ppln7aed23
SHA256 fd60ed2d79b43c88a5427f52d5c9f1253f3ca8cdab3183767916c8a396b0485d
MD5 040a8d64c811a561190db464302b06ec
SHA1 711775c85f1c0a5e0dfc47b86cc51183e1ea25d8
SHA512 f10d5afc3794a35644bea91653779e18b8ae86d437035e0b5dbf549527cba200b2f27724beb7d219e45004824da635f51b98b207f0c9318ae500ed85b3057cb2
SSDEEP 98304:AMhP9yWt1FXkfPdNCjNTEYkpwNSHfbv0u5IhThw6Q1f+hl/hjY4+iafv:AMBi4NTxki0/oKiu1f+79YR
TLSH
T1CE86D015FBC65201FB262630253C7D7B8721BBC49AF88ACBD762688855717D24C32F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
32	4860	YandexBrowserSetup.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	YandexBrowserSetup.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4860	YandexBrowserSetup.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Yandex\YandexBrowserSetup.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\Yandex\YandexBrowserSetup.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 305955e733c7380ae1e69874f95bb3b24afbb57d3ed85287ce9146e97ba6e5a7
MD5 d511eba2d812cda76d4f0c50cbc0a07e
SHA1 0afdd1145347128eab656afd906ec24524ff1d9a
SHA512 75d6d4170cbb8e9e0b4f75661db90311d0cbe49af768463bb343013b1e24934a21f092be2ce284ad2483307505bf0ca2b8623b761aa6307a1f12b322306579ae
SSDEEP 96:KgWbRQ2ej57PF1HfHJ6fYF6PHLHEHESHUHfVHYHXHAHMHFHGHX8HWHuHQHBHE4P1:/757PFH6fYxq
TLSH
T18CD14E81FEE195782EDFE6ADD4FA3EE3CC8830357124D9E16DA911816CC25102EBF499
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 5996f60e568e3d7e4a3f22825b421c538d55f6e55a11cef4930a5f995bef88ab
MD5 2ce1cb5d59e43839162ffc4cfceba5b7
SHA1 2729bf352b40d36b1bc75ee328d0020ead7881a7
SHA512 d44bce36fdd2680b231476e738b8623090cdb0ff37cf13d963987d102113e03140663a1a6039a3de9d4c4d43c3c237c5d6e190dba38b2fb14b6c9a5414cae135
MD5 SHA1 SHA512