9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74.exe
Size 10.4MB
Sample260826-d4enmsyvcx
SHA256 9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74
MD5 3b063f56e5997a1181a1bde061c8820a
SHA1 fb2ab291bc157dcc9561026229cc413fee1dc893
SHA512 7f5fb4e94fa1a5b392313fc72fb68fe8c963794da2c28f6a1c00e383b6e341914a99081498b039a6c2c08ee0c04808963661d730bbb636882535f6ace7eecae1
SSDEEP 196608:eZyhPtNAbOy3wSVLNTx9Pe20/aVHXiu6E:eZ+PtNAH3wSVZdCahXie
TLSH
T159B6BF46EBC22125EE2A6E30593C7DAB4719BDC947F047CBB6E9385414716C33836B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1432	9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74.exe

C:\Users\Admin\AppData\Local\Temp\9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74.exe
"C:\Users\Admin\AppData\Local\Temp\9070babf73a83fb1e2bb6c20c9fec12af6957c3ba499daf8e6d6c6b2166fcb74.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 7KB
SHA256 71a3ae34fbdb011e012ff24a7633b34b5d15c14a223ad0f7946467f57d7082c0
MD5 ddd9c122f9b21393b0fcc2b1d446a955
SHA1 6eddf69ef66cfba405ef4e72b415f12b743d86ea
SHA512 65733f3cf53c114413417749626d762458fd381c6a21d312e66b2535569a5ed48743cc99f569c55fb200711c532a930bcb15d467bb2d300acd860ae8f7cb37b9
SSDEEP 96:KgVc5h87wLK3+H7HF2hPH9HCHUyCH0H7VHkHqHRHwHBHSHO8HRH9HEBHEaHEuHEE:7GoaK3sZCupNxu0nqweywdM2
TLSH
T15DF1A01C3CF987341A17D558E1ABFEA26CAE72377018C8D165CE1156A8E310CBDBF25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 a8b0b3e2ba672daf9f27deeb15bd967fd9ca3d2a8872694a791ddbccd3a117d5
MD5 73fa93af20f2f5f8e29db521f436a56e
SHA1 4dc6790bbb093b375d8b248e1aacb237cfd33ff8
SHA512 3f949af38f725fa4e477292c76133f04f347c473af91396db34b8c8aed969d327d46c3d7aa53b36efa110830f29a7155b8a95e62213c684d6a0460e8bf382146
SSDEEP 96:KgVc5h87wLK3+H7HF2hPH9HCHUyCH0H7VHkHqHRHwHBHSHO8HRH9HEBHEaHEuHEL:7GoaK3sZCupNxu0nqweywdMuJbU
TLSH
T10B029E1C3CF987341A57C559A1ABFEE26CAE72377018C8D065CE1556A8E3008BDBF259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 99da1e9e427f2201e3ebaa7c5e1e1fc1d34a0e51b8065e597aea5f466a145b36
MD5 728a8ac81b4b328a7cdc35208974bf61
SHA1 1a6f8b4bf7c6ad5a536d6b51b23916443e24f40f
SHA512 289601d66176c6d8f61c86c78ad3a069f18956548c4f040458277544ac015eab22829cf559aff0b53cd4091dfb4e719591e5a7f338f1a4a2d4453d095f5f7d22
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads