2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 07:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe
Size 10.3MB
Sample260822-jgqqaasdnf
SHA256 2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2
MD5 2fe2c4b6f30d668cb86a89b3b0ce2aba
SHA1 6c444f378394acc9a5c81228a765488df6e31d63
SHA512 f1fdd7fbf6853945f9c9fa514026376888e7a26429f16215b74cb266a9d2162d6244b8cec929f9ba053d4921e44436a1f1cfac4b5e699fc921d26655c17abd5b
SSDEEP 98304:K6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwK:x++YIPiGBUtvNTx9Pe20/aVHXiu6E
TLSH
T120B6BF42AB812525DA2A6E30593CBCAB4729BDCD5BF047CBB6E93C5414716C33C36B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
15	6300	2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6300	2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe

C:\Users\Admin\AppData\Local\Temp\2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe
"C:\Users\Admin\AppData\Local\Temp\2b4c8133d83f32ae795aa59c66774cf7bf1534e3f30b226455025c4dcb2211c2.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 a89b67bba9ac0e201baec3cee3929f4015827aa656570a17b5a76df221a1c7f2
MD5 4a7d95a462edbe58ed3256c90b4e4e57
SHA1 1fee971fc4283b28c4cb14481d3a4a041a6ebdb6
SHA512 7a1daeed54f04f0a6e14b6850af2a17de5dab1171bcae6ae4f0338de7f96c9c8003154d74283aa85e130e1d668e3b575f29a9c1930e8a765a71edfd8c3bed997
SSDEEP 192:DW5Vq92sh2NVEE8o7OdnXkqdmCnbG1NkrmMU:gVq92shIVEE8o7OdnXkqdmCnbG1NkrxU
TLSH
T13E026AD03CF98D392A2659B894A53DDDAC98724CA034A8E1E2CE4E1099D30467DFF57F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 0c86310d675b5dcccb4e4793485e786a2623b2dddfbff5d6e39e89fe6f1e9a21
MD5 ad6116bb898398b4bc352bbf9221c701
SHA1 0b67a25449c6b650238a5d397a56eefdcccfd572
SHA512 f8736d8bd3bb09b9dd5de2a5c6b8d1bd052f469a74feea453dce71d623283c4c3009f1792f8a6e3a73958a0c2774e4c9225d7f27be499e57e217b517c596a7ac
MD5 SHA1 SHA512