05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5

Analysis

max time kernel
180s
max time network
162s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 01:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe
Size 10.3MB
Sample260831-bnvntaec36
SHA256 05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5
MD5 64fed27f0eb42946bcb634f66e131544
SHA1 4fcb917b954896182271cc4bca1acbcb842f5eaa
SHA512 4f7f26a1f32d94d9d1aa3b28f4e21fbb9d4d0368e3090453ce9d7f270357049220863eb46946ccb4bcb9eeaf535330bbd588a914615625784d86e28152474a03
SSDEEP 98304:K6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwK:x++YIPiGBUtvNTx9Pe20/aVHXiu6E
TLSH
T109B6BF42AB812525DA2A6E30593CBCAB4729BDCD5BF047CBB6E93C5414716C33C36B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
20	620	05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
620	05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe

C:\Users\Admin\AppData\Local\Temp\05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe
"C:\Users\Admin\AppData\Local\Temp\05d8864bb95403e9bf4e21c5d90c269f3849ab784f7487d9a12cc3ee86ab80b5.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 4KB
SHA256 47a2bcef97bff840328819efb1590ad1853518dc0a1f8fa27c81d5c7d00eb4ea
MD5 1d25b387ab2445d74237e0c7c2ecbb59
SHA1 2173e38295f37854e18ff02a3a3e326ce17e9192
SHA512 5b34253f9fb95f1b46db4e54bab4b3766da2ef80efde0b37abb6205529b94ce0b1f1f8902e28e5f2d5f62c79aac51725af6e65401f010d76faaf7da342939eaa
SSDEEP 96:K63upghsAwFSOz0HdHdMQPHFHQHaFH3HWVHNHrHWHsHTHqHo8H1HhHE7HEmHEIHG:LcgbwAOzGyYl/b
TLSH
T1D9915D0079F695711E1F62A9E4752DA6AC88342BB2247CD17FFB16411ED321C2E7F0B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 6KB
SHA256 5ffb22f859d0932845cfe37d09634dca115cb0cdaf91cb475160c2811caf1b27
MD5 ffe062fb5dd508f9604bf39ffe8c97d5
SHA1 a820fe2ddce0ce5a556288149f2ca7d5b2ad3622
SHA512 e0f2b0b1aa477636e604156f2502fa6a0faa24e56da1c979bda4e89a50b04633cd0691739e797087bb8bb6e716f56522214e586a8b18ccee8b43e4224f264d2c
SSDEEP 96:K63upghsAwFSOz0HdHdMQPHFHQHaFH3HWVHNHrHWHsHTHqHo8H1HhHE7HEmHEIHs:LcgbwAOzGyYl/T08Hf9R
TLSH
T1E5E12A0079F699351E1F62A8E4753D66BC88346BB2206CD17FEB16415EE321C6D3F0B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 aa05a1747851f2f91b8851dab85002dbeee8e754bc3845252e7343b17f0255df
MD5 40c1e402ef54def68d6e48ec45aa5f40
SHA1 6bab148fdc7385341e72be03fb56ca983f32bcdd
SHA512 5ceaf02ce6ce92ca176ab43b52a03760baa3800195fe97a589fe9dd8dc3afb4f5fccffaa0b6f1db742f6d8923edb4fbe62fe51691eaef11ad9b557d590baa18a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads