7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550

Analysis

max time kernel
150s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550.exe
Size 11.4MB
Sample260823-qeecssac92
SHA256 7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550
MD5 c29deeabe196fa97687f72890946d638
SHA1 bd93bfdbb41e4398b40a48d1d1c5c43f8edc6ce4
SHA512 48a47f577ac67910864021a42308b21ec7868dab455a54d2324b1dd09287c85742fd4ddcbb54e66239e2dcd9312ba73824124c67aa0cb03cc97d1e2a2cfdff6f
SSDEEP 196608:2S1yj4RzJYCAq6nI3KQ/BLbZNTx9Pe20/aVHXiu6EV:2Scj4RzxAq6nI6QZbzdCahXieV
TLSH
T16EC6CF46EBC12125EE2A6E30593C7DAB8728BDC957F047CBB6E9385414716C33836B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3608	7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550.exe

C:\Users\Admin\AppData\Local\Temp\7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550.exe
"C:\Users\Admin\AppData\Local\Temp\7ff4df18dfd5dadbb6a0bb55fbc8881d8d62ed805812c5c3f145a4cad658a550.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 2KB
SHA256 542cf9cc9df21cb0a67ea4bce732df793a33af0eebaede10a077e0ac9ed554d5
MD5 b073b0451766d0aa8dade1d2ec51a68e
SHA1 ea6bf861c620951d87f92d2bde7165e439c7f281
SHA512 2c1da473bba20dab37e5916ec37598c4122d3b6af24c54a1b3ce0f669c50478f7da7ffa7f63b9310ced908b59a8f8e9225720fd4959e3dd959b7272b8fe8bc50
TLSH
T1D4419906BFF449383E8DC52E27730DE2DC64B8C4B4669FD93B9A188525C37463BAE115
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 1fd45367cae12577a6c00ae7f333c9ed0db5ba9f17677b58bb4eb582ab6c466d
MD5 13580845916281b0c2f3e794dbaacc05
SHA1 dfb4c114327a0d257a9ee3c39b55d0b6e31210c2
SHA512 dc9d2ed780a69e88c1ade453aee3304196aa71619c0b38891c3de765a18f6d02ef6cd118fb8e364c50ae1075d3a2fd1419c9b6b78d300f72fed6b7d4dea6b76a
SSDEEP 192:P+rfkJtiwv2Srr7eUfMk+YDl9+iTjp188wuHe:yfkGwv2SgoLnPMuHe
TLSH
T139124D067EF189283E1F91A8F9B72CA2EC9838C830615FD569CE198168D33497F7F156
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 abe98bb46e9299a19eb236c6ccb5ddce84b2ee8c2d96f3aef3741e0921777137
MD5 e2dd8810fbdb0bb944b95194b4fde259
SHA1 e5db9046c12200edfed4bfa9968bc26f9f0a593a
SHA512 baf2cee4a421ef1dfafcd6bde9d464bd4f58aee64205ca50a4fe199ca0471dbfcd64cab065bb9955504981c78ce65b4c3d07e73b07d55df4f623e10a54518e52
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads