Analysis
- max time kernel
164s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 09:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe
- Size 11.4MB
- Sample260908-lfchdawvct
- SHA256 379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3
- MD5 8588ae09817d47ae77b382b6c18567ac
- SHA1 e593b423ec1e6e3175937a5aec63906cbf65a3d3
- SHA512 b010d1f7241588bea07b7afd52b168e1ab62095cae64409e6646197494624f07550868980b17ab076b4f055c0d50e713d8b3b8973777654e986cda215a770b3a
- SSDEEP 196608:NyIP1l4Nm90dP02leP2E2SxNTx9Pe20/aVHXiu6E:Nym1l4k0dP0pPRdLdCahXie
- TLSH T186C6CF42EBC12125DA2A6A30593C7DBB4718BDC95BF047CBB6A97C9414716C33C36B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 28 4788 379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4788 379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe"C:\Users\Admin\AppData\Local\Temp\379077b88b1fb13081845f71426c5acc0ef7135ffd2fa31479ff08ffe57773b3.exe"1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4788
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 11KB
- SHA256 0b8c78b7af4dcc23b44cc81461fbe5f13d0f4896ab6fb38c8d4d58b23d0518cc
- MD5 b9fd1531005242b5f564f3a426804997
- SHA1 203a9dd1a6c8ea195b0797328e5c3354ad20e6c6
- SHA512 3b316f9866de73ee7203b49af00593e2dc03a3a66f64d316ce7657a64cfe65e13dc4bd7c5a61e44f5b007281ca6d557972bb4de6ab86993cce43792078eb284f
- SSDEEP 96:KCzRjv/9/n1yjrh8EXSTIWyW/W/DH7kHeaBW9H9/HQcHjqd8HGpHgqVHNsH6ZHnN:3E8ed40svH32tYIDbTpVkiCRD2RXT6
- TLSH T128420E947D6AD5313A2A919DD8752E92CC983F0A3008EAD1F1DE98418BD3D1D3E7F81A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
- Size 10KB
- SHA256 294ea133222bd590b2079b90e23b4d9974739c875d4ed59f3db9ee90fb2332c6
- MD5 d1120077c67b0bb1ecf65186e1cc270b
- SHA1 a7daf548898bd32649d8b9cb50feb4c13e8225a7
- SHA512 e7b48baa2d36a9ddb2d6cfdd5b1125bc48e7752038a51b246dde0c95e52571e51e488d359b99ab0936658f937a15dbcdcde17a0e1bbbce97f4cf8c97136cbf75
- SSDEEP 96:KCzRjv/9/n1yjrh8EXSTIWyW/W/DH7kHeaBW9H9/HQcHjqd8HGpHgqVHNsH6ZHnX:3E8ed40svH32tYIDbTpVkiCRD2RXU
- TLSH T1C322F1547D6AD53136279168D8752E92DCA83F0A3108F9D2B1DE98018ED3D1D3F3F85A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Yandex\ui
- Size 38B
- SHA256 3662c5e29094c336b0954702f5689528d9931cd4785455be98dd5a29ac59f0ad
- MD5 ff9c8f67fb9ec882daf9774bbec155c7
- SHA1 5a06842c5fc44f31e157c67094a5a9c3bcd4e593
- SHA512 1ff5d6c584bce8cd5bb9143c53a47cd758fc2607b05ee63f2083f58ec1fd5c45660983ef0b73f99a9a363d7fe190094d05631a823daba9f10a21d8b0a2e4f468
- MD5 SHA1 SHA512