960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 21:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe
Size 10.5MB
Sample260815-1frpmavvdx
SHA256 960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514
MD5 15d8ea891da415c254fa9fa95dc3b47e
SHA1 9efc4db1ae21590fc4f12da294ea5cea882b1151
SHA512 0b663afb2acb08b20c07b62f116780607cbf493f3f62241ea23d560c26d9d9df2e13ee6617c0536c62bc7de04a1dd2fc2c1eff79dc04b4ae36c90b7a557646bc
SSDEEP 98304:46666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwws:1DtOsb+OnlIYefNTx9Pe20/aVHXiu6E
TLSH
T144B6CF42ABC13525EA2A6A305D3C6DBB8325BDC91BF047DBB6E5785404716C33C36B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
17	4352	960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4352	960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe

C:\Users\Admin\AppData\Local\Temp\960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe
"C:\Users\Admin\AppData\Local\Temp\960882889edefe9a0b08cf66435b3e53b9b999eb86ba70168b6343c7400b2514.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 334bb617c5aba193d87a25529e7ba83b2d710113fd727f1940a802e4aa3a7002
MD5 e664567faf6bb0064a119ad09e488a5c
SHA1 960d3224ec167b755c714dbcee6267a725d6c29c
SHA512 ab449f767d485e49ea3bc03c5d298b5cc760f809c3c1efcd53be92f9dbf2cd0c3016eb3589c0572605f5c3795d7caf461c052a82c374db41cda13f8a92f0d5db
SSDEEP 192:4BXZ2PiMA/mLfiCNFwOvFeMIrO11agrGw93YG5:eXZ2PiMA/mLqCNFwOvFeMIrO11agrGw1
TLSH
T1AFD138043DE1CE361E1B4699F86B2E91DD993D8692189CE1B1EED1808FE71006D3F9F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 47436eb047ed717cee43deadce50226cbb92340144a6e180c4bb6fd3703494a1
MD5 92a60a53fdf0a96300408ed84c186f42
SHA1 23a85322a751eec16c08318084a182dbce17a9da
SHA512 f2a3313cfd309c3b1d86c59a551a3ee1e9e549e70bbe677468f538c897bbaae51367b28fdcc50fbd52ee9c67cb6349a5a69aa6205e054ba94600f9ef6bea01e2
MD5 SHA1 SHA512