72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 00:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe
Size 11.6MB
Sample260826-arq95a1bme
SHA256 72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27
MD5 46c36f956e4bec578d73091d4342700f
SHA1 51376a1a4ad2d57dca6744d1b10b2917a60b62ee
SHA512 85f8b4407a4e2eadf67c33acf4647b9189669fba4d68a2fd6527ab18134fd13ce49a5f8184b71a99dc7657c166076a4a59b508e8f6611207266509904d52517a
SSDEEP 196608:SdnwRZenXaHH5tOMmpYNTx9Pe20/aVHdiu6E:SJwRQnXsZt3EmdCahdie
TLSH
T1A2C6D096EB813125DE2E6A31153C3DAB8215BDC91B700BCB96EA7C9445717C30D3AF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
59	3736	72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3736	72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe

C:\Users\Admin\AppData\Local\Temp\72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe
"C:\Users\Admin\AppData\Local\Temp\72c5cb2a65e08cac8be71cf7178eded9845ee2a9425fa41da9a9d3a709604f27.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
Size 342B
SHA256 4eae3dd78273cad2e50186b80bfc66322574bbd8ff108ab062c84271ef691f11
MD5 65605cf5b23f1024ba0cdbea1eaa0c96
SHA1 6765ae2538e01883505891ce47533e4eeb1884be
SHA512 d090fe2347bb4e874e54ca5a4c4f3902ec0e640dd911e791baf3c2856d26482b27b0ff06fc0f1b80d96258fdec618ce6624dcebc0f6ea66a7560a69f79c15682
TLSH
T134E0C2113BA80204E5730A3CA933A448993673376E41CADD0674008D1C21F91883271D
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 3KB
SHA256 4c8dd91e66547327a2d745e23aa362aed13dee172cec635060940fc21f9f7626
MD5 fae24f66651e5bc3e74aceadef2e2e93
SHA1 b9638b5da0088a70887fbbb931d026e9539db79e
SHA512 aee95b3c5cd1d1b65439e17234704890281ea6fc805539111a2132217f4b0490933ee9683b40bbdecac5723237ac11aca7fa56fdfa1552b4a557ed780b975222
TLSH
T1FB616B103CF1E53E2A1F8BADB0EE1D92AD4A72A6691588D17BD995C0DCD30242C7E376
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 cd95fb040672c00d0122c76b996228540ff6ae8b9418100894a035cc00ed3931
MD5 289b10d3f2b08714aa3ef9335e577ec0
SHA1 e715f6e76eeba9c6e6a52b066df6396f618e974a
SHA512 00f812ec0ed20e35fbb1b73999ef42b465ec1ae1233034db2fcfc363c3120c782a228ce3cec1a77be361cee28d16522340d6bea56d7d8ef910cdfaf89e90aec7
SSDEEP 192:ylfUcrGDUDJDrs2PqmVFncpDPGUqmVF0cpWPtMUrfa6LwtW:JTIl5qmVFncpDP7qmVF0cpWPtMUrfa6B
TLSH
T1240216103CF0E53E2A1F5AE9F0AE2D926D8A726B5905C8D16ACD95C0DCD21287C7F276
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 73b88e015623d47fd0976d09d38278a1778d0a0733b3ad1da6828571b0bd26b0
MD5 012f9b788fa5444214aa99509cc4a199
SHA1 55338c6c38000baad01508a7308079e53e4df142
SHA512 6371bca5c020a07c37bfc9d2b3fd7ec165dd27fe558ddec6d6ea2d708628d6b314213e3aaee3d3a758d14247d24aecc5165f46aeab56bcb2934b89068558fb3a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads