dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc

Analysis

max time kernel
149s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 02:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe
Size 10.4MB
Sample260824-clrd2ssckh
SHA256 dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc
MD5 663c7889a48d2ce13b77d8f4d563a033
SHA1 bf032499ba4f441ad6624b234a38fd2326e4109d
SHA512 731f5a72526355ecbf363d60e695ea2e73d7a1f714ed11bdb3320fb2f4a69fbba1285047cece32d6675d246a6faaee9a8ac7527a9e7331202b59f904b061b2d7
SSDEEP 98304:96666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwO:QMFLMVGTjksXDNTx9Pe20/aVHXiu6E
TLSH
T1D3B6C046AB812225EE2A6E305D3C7DBB8324BDC957F047CBB6E9785814716C33835B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
15	4968	dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4968	dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe

C:\Users\Admin\AppData\Local\Temp\dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe
"C:\Users\Admin\AppData\Local\Temp\dee819a8b6770f9a30413d79aa87e8944e5e481b624407f181884ca66c3e4adc.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 db0849df7beae1db5d13839752f699f5a6e6cfeda775eb79a00ea8b0a6cab8d9
MD5 ef4d151ffcd0675a3c5992e3948d46ac
SHA1 929b512702bf12614aea9b1ce21646ed83c8e088
SHA512 b76fe656a90e0b5826b30bb93a9f22a31bcc806a2c45c46219e66ba4a22989eea2a68f9649bb907756117446d2fae384011dbf359c6d0d1ac3aa35d865d77a6d
SSDEEP 192:lUz+WLOMYRaLG9GYGIMa/WFpvLBxJmuDJG6PE1vSI/vZCw5hLZ0MSz+hzo8Jm/No:RsQteqR/radQKO1s5wIU
TLSH
T11E029D10BDF485302E66B969A1762FE2FC99F0E820204D9279EE16905DC3211EDBF95E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 182da10949b9dd0601ca57d635f219bdbd0807f038d6e879eee937708d8b107a
MD5 c096ea9305a294941f34c882b7d2f589
SHA1 60ce3590a7830ef8da63f069f988965236bbe505
SHA512 ccd76005c55a5a57457eebb532a3fd3e6917c8a4b3bbe94dbd133b43a86de978ad90766661ea5801f6ebcad5759bc0752a02f300c761f15d96e34510f54a751e
MD5 SHA1 SHA512