d5f7a5a0f4ee20154eaa2e500dcf68863dc3781d0ca02b41eef7a96257302c5a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
07/06/2024, 16:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
stan_tool_4.exe
Size 8.0MB
Sample240607-va1sfscc72
SHA256 d5f7a5a0f4ee20154eaa2e500dcf68863dc3781d0ca02b41eef7a96257302c5a
MD5 96bfb6fe14cb5f425e444781f3d10b7b
SHA1 c34de5857af2b4ede0b50bef10b6a73e32495e5e
SHA512 1e4caf549f8dedc6ad7d09a55301aa997a83943ac5eda8a80d765a144326637554ceb3cfb0a0bff2163ae74db66fde3ea4aee0a3783a4831b37dcc5c6f65741f
SSDEEP 196608:qUPYwFCsXDjDyfuL2WliXYrHW1LPm3vPQ9TAoxTF3P46:JPtCEDhL2ciIrHWRPe6TAoxTp
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 24 IoCs

pid	Process
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe
864	stan_tool_4.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3748 wrote to memory of 864	3748	stan_tool_4.exe	83
PID 3748 wrote to memory of 864	3748	stan_tool_4.exe	83

C:\Users\Admin\AppData\Local\Temp\stan_tool_4.exe
"C:\Users\Admin\AppData\Local\Temp\stan_tool_4.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3748
- C:\Users\Admin\AppData\Local\Temp\stan_tool_4.exe
  "C:\Users\Admin\AppData\Local\Temp\stan_tool_4.exe"
  2⤵
  - Loads dropped DLL
  PID:864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\VCRUNTIME140.dll
Size 94KB
SHA256 c865c3366a98431ec3a5959cb5ac3966081a43b82dfcd8bfefafe0146b1508db
MD5 18049f6811fc0f94547189a9e104f5d2
SHA1 dc127fa1ff0aab71abd76b89fc4b849ad3cf43a6
SHA512 38fa01debdb8c5369b3be45b1384434acb09a6afe75a50a31b3f0babb7bc0550261a5376dd7e5beac74234ec1722967a33fc55335b1809c0b64db42f7e56cdf7
SSDEEP 1536:yOHL+4KsAzAfadZw+1Hcx8uIYNU5UEH6Q4ecbjtwp2:yOr/Z+jPYNVEH6Q4ecbjtw
MD5 SHA1 SHA512 SSDEEP

Submit Download

_asyncio.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_asyncio.pyd
Size 63KB
SHA256 3e521e119cfad53c8fcf67bbf26de2ecffe24cb13079f36a22339f0f8ad297a6
MD5 c89b5ec34a76d00543d55748a7275cb1
SHA1 341a61e181fc7957d326080354135e20d3d16fab
SHA512 b21514674bdb7ca392e35bfe1ecb3dbbe16bd8daf38fbeafb6182253551f3cdd37833df523ab6181555a6547f764224626fcb6403429decca1ed58dade2b01ef
SSDEEP 768:qKMg5KvjSGhtDwdt9psnqR0RWqJ7J4j+Ba36oWeU9MRIXYntRgDG4yj94hg:qjv+GbWp/Wk6oWezRIXYnbsyj9X
MD5 SHA1 SHA512 SSDEEP

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_bz2.pyd
Size 84KB
SHA256 7301fc2447e7e6d599472d2c52116fbe318a9ff9259b8a85981c419bfd20e3ef
MD5 a991152fd5b8f2a0eb6c34582adf7111
SHA1 3589342abea22438e28aa0a0a86e2e96e08421a1
SHA512 f039ac9473201d27882c0c11e5628a10bdbe5b4c9b78ead246fd53f09d25e74c984e9891fccbc27c63edc8846d5e70f765ca7b77847a45416675d2e7c04964fc
SSDEEP 1536:AAZb8z7AHjR0YeOxqCYHwE0UaXytT8bnHiS3om5IXMVKfyg3:AYAzCLeAqXQE0UaXy6bnHiS3om5IXMV2
MD5 SHA1 SHA512 SSDEEP

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_ctypes.pyd
Size 124KB
SHA256 4fcf4c9c98b75a07a7779c52e1f7dff715ae8a2f8a34574e9dac66243fb86763
MD5 7322f8245b5c8551d67c337c0dc247c9
SHA1 5f4cb918133daa86631211ae7fa65f26c23fcc98
SHA512 52748b59ce5d488d2a4438548963eb0f2808447c563916e2917d08e5f4aab275e4769c02b63012b3d2606fdb5a8baa9eb5942ba5c5e11b7678f5f4187b82b0c2
SSDEEP 3072:OKUaI6Ys/T8uNJKJEt8VkOpJAfrZv1wmquK1IXBPiV:VS6Yswsd8VkDfrZvmrRhV
MD5 SHA1 SHA512 SSDEEP

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_hashlib.pyd
Size 64KB
SHA256 e7aecb61a54dcc77b6d9cafe9a51fd1f8d78b2194cc3baf6304bbd1edfd0aee6
MD5 88e2bf0a590791891fb5125ffcf5a318
SHA1 39f96abbabf3fdd46844ba5190d2043fb8388696
SHA512 7d91d2fa95bb0ffe92730679b9a82e13a3a6b9906b2c7f69bc9065f636a20be65e1d6e7a557bfd6e4b80edd0f00db92eb7fea06345c2c9b98176c65d18c4bdbf
SSDEEP 768:Uyz+AYBOAMfR5UUtgx56xDzyDcpXsSKZ8te7POCyRIXYIxDG4yANhs:NfrTgz2iW8Ct4OCyRIXYIzyAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_lzma.pyd
Size 159KB
SHA256 638cd8c336f90629a6260e67827833143939497d542838846f4fc94b2475bb3e
MD5 cdd13b537dad6a910cb9cbb932770dc9
SHA1 b37706590d5b6f18c042119d616df6ff8ce3ad46
SHA512 c375fb6914cda3ae7829d016d3084f3b5b9f78f200a62f076ec1646576f87694eec7fa6f1c99cbe30824f2fe6e2d61ecdeb50061383b12143cd2678004703199
SSDEEP 3072:zaV4EPfesMbwjQneCJP8dTGDEvznfo9mNoPldfir35IXD1Y:zaV4EPfnMKQZ+0DEbwYOPer3H
MD5 SHA1 SHA512 SSDEEP

Submit Download

_overlapped.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_overlapped.pyd
Size 45KB
SHA256 cd475a094ddbdc315c2a2072002b442d2e9fbd7aa0db3a037653acba74899ecd
MD5 071461aa318f97345f1f59a28cd4c110
SHA1 f4630cf01f27cd20d27a41a48708d27f03a61e37
SHA512 7cfbc92cb726c7f4b34e315303d9d983360d470ba1793529792122bdf2cc133c75e1c960a1b8602407743b3dfd7639153c226bc80f08afb5bd467f98194e722a
SSDEEP 768:n1zGue9C1WOcUanIvyOsoYjE80PhXjx1wSS9ctIXtttvDG4yjgihj:1qbxIvphXjx6PStIXtttJyjH
MD5 SHA1 SHA512 SSDEEP

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_socket.pyd
Size 78KB
SHA256 fdb14859efee35e105f21a64f7afdf50c399ffa0fa8b7fcc76dae4b345d946cb
MD5 478abd499eefeba3e50cfc4ff50ec49d
SHA1 fe1aae16b411a9c349b0ac1e490236d4d55b95b2
SHA512 475b8d533599991b4b8bfd27464b379d78e51c41f497e81698b4e7e871f82b5f6b2bfec70ec2c0a1a8842611c8c2591133eaef3f7fc4bc7625e18fc4189c914e
SSDEEP 1536:dBM6HuD4Zb7hmyAd9/s+m+prnUivSrpZZ31IXBwZyjhX:IeBHAd9/sb+pDNSrb11IXBw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_ssl.pyd
Size 151KB
SHA256 3d183c1b3a24d634387cce3835f58b8e1322bf96ab03f9fe9f02658fb17d1f8c
MD5 cf7886b3ac590d2ea1a6efe4ee47dc20
SHA1 8157a0c614360162588f698a2b0a4efe321ea427
SHA512 b171f7d683621fdab5989bfed20c3f6479037035f334ea9a19feb1184f46976095a7666170a06f1258c6ddf2c1f8bdb4e31cbfd33d3b8fa4b330f097d1c09d81
SSDEEP 3072:o+WSiO1vJpfdaywIj2jmN109OVhhVrykq7SOH70NmHh4kwooSLteSdN1L5IXM7H:oHO1vJpfknIjd6ghV67S4DthN1L5
MD5 SHA1 SHA512 SSDEEP

Submit Download

_uuid.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\_uuid.pyd
Size 23KB
SHA256 36e15e9c7953c5fef0e83dafa86bf0d9fac2032d07c66e4a339deae8b1dca049
MD5 054e24e81058045be333f2437e38f75a
SHA1 e4d958f57cb5269158975c0c94c4d70107748d0e
SHA512 09b55b016b291dbcb4bf6a36f3438e538b29f57306eb2048e994c3ec7bad8a44e06ff653d4cd6b9a637bb3e4d4eb5fdff8aabe1d45b74ef8bf089d643ea32278
SSDEEP 384:++FTcuByPxnS9essNF0pzCs95IXDwqDG4y8mPPhE2z:++FwS9ib0pp95IXDwqDG4yjXhFz
MD5 SHA1 SHA512 SSDEEP

Submit Download

_frozenlist.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\aiohttp\_frozenlist.cp39-win_amd64.pyd
Size 63KB
SHA256 6a563a4ddc233ed5f01f8635d590366b5a078ac73a28a82d837f24bec23dd14f
MD5 f2454e08f168a9af3b6aabf41c5488e3
SHA1 3ba72153103db0292c555eba4f43f37bddd43a51
SHA512 3b2008e5ff3009664d7eeafffc3c8bfe420e337177a3f6926314773d65b6622a09b192e893ec50f0b366f356c9b4768358e352cba96127f85f529ce255eb8c93
SSDEEP 1536:EnVGgALYiqXcCFpaLaA3VIAap67Tag/6zUF:EnVGXLAFUaAekag/6zUF
MD5 SHA1 SHA512 SSDEEP

Submit Download

_helpers.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\aiohttp\_helpers.cp39-win_amd64.pyd
Size 47KB
SHA256 399dfeee9a2f8c6a132c2d4d28931f4c6c0f1d1394de54b182a6457d9143a418
MD5 6815a1c38a30d6ae70027184c09adccf
SHA1 ce5afe856c4445d173c0d524f139d1aed3cc4e65
SHA512 efd4fa17a9611ca4337cc667b164e83745bbc4043c226e684957146c9bc2ba37c892940845ec2ff0142d3fe604654a12bf05022782d0c0c3194e4d109b5ebf4f
SSDEEP 768:ZGCY7soZCy8HCoQijTmyKyE0oW4xXnCh+X2uxeS4h6TJd:ICYrYrHC6TmtWiXCh+xxem
MD5 SHA1 SHA512 SSDEEP

Submit Download

_http_parser.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\aiohttp\_http_parser.cp39-win_amd64.pyd
Size 230KB
SHA256 636a925eb31c3a7de39cb9495613b13570606a0672d3e699cb6983287e0c01e3
MD5 67946fe0102b3555988a8edd321946c0
SHA1 a93b16df8e9ccbfe2892e4676f58a695cde9604a
SHA512 786a4e6c49f77bf6cffce5c98cbc66d518075309dacc4c3df286d3c3bc21f7c0cf7986bf85e374827ec7951c13acdd031e76c336bd1fb4fd265aa03a8a28dfd1
SSDEEP 3072:oF3Qd6+nemq2HgNDph3ZApzHar2uDWlna648numVh:0Anem7HgNDpGypDCnFumVh
MD5 SHA1 SHA512 SSDEEP

Submit Download

_http_writer.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\aiohttp\_http_writer.cp39-win_amd64.pyd
Size 41KB
SHA256 84e8b37d6fd0162610deb3c1d4887f70e6447850321eea846f860efc2862704b
MD5 1a518361de37d98224ff98bf47618ecf
SHA1 f81def8f71d203aaf68774f6e1158ccceb5806bc
SHA512 7ffef935ba56e2bbad0c569e63f5d33d83dfc72e10252ee259c6fff9859c4e302405a8c017012a9efa6da40ecc1de1ad3248a89404d8532b78b177a6d2ce305f
SSDEEP 384:RrtjBAGTHAdIOci5as7KtEZa0+FVZF1x9KubnNmmXqqdunqn15dtRIecRq0zkj6c:HBAoHAdTr2/3zmtXzUuJH11l5iAPT
MD5 SHA1 SHA512 SSDEEP

Submit Download

_websocket.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\aiohttp\_websocket.cp39-win_amd64.pyd
Size 27KB
SHA256 d1c463b5c7a878ef5358a63bb0ea9e87311fe1f416f762bd18b4888c170c647f
MD5 5fdb53cff23dc82384c70db00ada94c0
SHA1 c52391eadeafe9933682c7dbee182200b0640688
SHA512 2d81e2eed6b4f37c4178141a24cf4475d27378a5bad3b6f8af022b185050ee9832de5db31271e5ca6e5e397f2e8a2a36edf9ca7eb6e0a9b918e3e8618c22e60b
SSDEEP 384:4Qnu59kQ2cy0hnByMzqm7ZvH9ZKqa5ncJoC20sfKL1g8OfYeJIzcQOfTaT/wI5Uw:5u3kQswvqqh4Z8OfrJImrJdXe
MD5 SHA1 SHA512 SSDEEP

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\base_library.zip
Size 763KB
SHA256 77479f65578cf9710981255a3ad5495d45f8367b2f43c2f0680fce0fed0e90fb
MD5 c6b38adf85add9f9a7ea0b67eea508b4
SHA1 23a398ffdae6047d9777919f7b6200dd2a132887
SHA512 d6abc793a7b6cc6138b50305a8c1cad10fa1628ca01a2284d82222db9bd1569959b05bdf4581d433ff227438131e43eec98bf265e746b17e76b1c9e9e21d447d
SSDEEP 12288:KShiavpJn3DyEfpHN5QcosQNRs54PK4ItijrVwHLfVEhOJ7iStE0r:7hiaTOiQcosQNRs54PK4ItyVwHLfVEhU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-1_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\libcrypto-1_1.dll
Size 3.2MB
SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
MD5 89511df61678befa2f62f5025c8c8448
SHA1 df3961f833b4964f70fcf1c002d9fd7309f53ef8
SHA512 9af069ea13551a4672fdd4635d3242e017837b76ab2815788148dd4c44b4cf3a650d43ac79cd2122e1e51e01fb5164e71ff81a829395bdb8e50bb50a33f0a668
SSDEEP 98304:ZX+SicVMcqx5q6ypQ821CPwDv3uFfJwwzS:1FicVMcqx5q6yX21CPwDv3uFfJwwz
MD5 SHA1 SHA512 SSDEEP

Submit Download

libffi-7.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\libffi-7.dll
Size 32KB
SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
MD5 eef7981412be8ea459064d3090f4b3aa
SHA1 c60da4830ce27afc234b3c3014c583f7f0a5a925
SHA512 dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
SSDEEP 384:2nypDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYIoBneEAR8:2l0Vn5Q28J8qsqMttktDxOpWDG4yKRF
MD5 SHA1 SHA512 SSDEEP

Submit Download

libssl-1_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\libssl-1_1.dll
Size 674KB
SHA256 fddd0da02dcd41786e9aa04ba17ba391ce39dae6b1f54cfa1e2bb55bc753fce9
MD5 50bcfb04328fec1a22c31c0e39286470
SHA1 3a1b78faf34125c7b8d684419fa715c367db3daa
SHA512 370e6dfd318d905b79baf1808efbf6da58590f00006513bdaaed0c313f6fa6c36f634ea3b05f916cee59f4db25a23dd9e6f64caf3c04a200e78c193027f57685
SSDEEP 12288:XXnznrSRNaJkxbpdM2QJCCMHxtfz8Irj0R6wQHPRv8Fl4tekY2U2lvz:vSTxbpd/Rrj0R6nd+SJnU2lvz
MD5 SHA1 SHA512 SSDEEP

Submit Download

_multidict.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\multidict\_multidict.cp39-win_amd64.pyd
Size 43KB
SHA256 9fb82e21ee4f4d37d019b7053e6be4d9eed8c92cd12a3f7211125032c6e8cb22
MD5 d70507ffb5d2f6d527e32546fd138d0e
SHA1 3c43e86ac5afa6c4064b17fcaff45be5a2bbb9d3
SHA512 15933d164c1df23bfe8960a465b6ceedb34b765861ce8cc53bb87fe37745c59f8ee132891b5dc408278b8ad78d7c098f450291350c2e577436ebf2d49ac53faf
SSDEEP 384:JUHLESSrrly4cUWtFngY0r+njjPIohnGcDDPySOCzEH9S+GZoY3ht7D/8+GdgHfN:aQygY0rHCGc3PXodkhBD/P9nJAkgYj
MD5 SHA1 SHA512 SSDEEP

Submit Download

python39.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\python39.dll
Size 4.3MB
SHA256 f8172151d11bcf934f2a7518cd0d834e3f079bd980391e9da147ce4cff72c366
MD5 1d5e4c20a20740f38f061bdf48aaca4f
SHA1 de1b64ab5219aa6fef95cd2b0ccead1c925fd0d0
SHA512 9df64c97e4e993e815fdaf7e8ecbc3ce32aa8d979f8f4f7a732b2efa636cfeb9a145fe2c2dcdf2e5e9247ee376625e1fdc62f9657e8007bb504336ac8d05a397
SSDEEP 49152:jtWzzUIxSk/gRBDcHIPEh1sGZxMuXG/nP9CmQNTFd/UQtrEB/DRzLnU4Jj/rDgjv:jEUY/U8SSYZ+txquHzMGxwTe
MD5 SHA1 SHA512 SSDEEP

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\select.pyd
Size 28KB
SHA256 d56542143775d02c70ad713ac36f295d473329ef3ad7a2999811d12151512931
MD5 fed3dae56f7c9ea35d2e896fede29581
SHA1 ae5b2ef114138c4d8a6479d6441967c170c5aa23
SHA512 3128c57724b0609cfcaca430568d79b0e6abd13e5bba25295493191532dba24af062d4e0340d0ed68a885c24fbbf36b7a3d650add2f47f7c2364eab6a0b5faff
SSDEEP 384:aWu7drPxT7FAAYeq15MkgIw5oJwhTGHqV+6bTPAr7hCQz1IXmGmDG4y8mzHDkhqH:zYyAU126JwhiHq18Pz1IXmGmDG4yjMhc
MD5 SHA1 SHA512 SSDEEP

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\unicodedata.pyd
Size 1.1MB
SHA256 e3ab6e5749a64e04ee8547f71748303ba159dd68dfc402cb69356f35e645badd
MD5 cd12c15c6eef60d9ea058cd4092e5d1b
SHA1 57a7c0b0468f0be8e824561b45f86e0aa0db28dd
SHA512 514e76174f977cc73300bc40ff170007a444e743a39947d5e2f76e60b2a149c16d57b42b6a82a7fea8dd4e9addb3e876d8ab50ea1898ee896c1907667277cf00
SSDEEP 12288:EezMmuZ63NJQCb5Pfhnzr0ql8L8kkM7IRG5eeme6VZyrIBHdQLhfFE+uEeSu:EezuuZV0m88MMREtV6Vo4uYEvu
MD5 SHA1 SHA512 SSDEEP

Submit Download

_quoting_c.cp39-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI37482\yarl\_quoting_c.cp39-win_amd64.pyd
Size 78KB
SHA256 e7af21ec47fa1aea28ecc7516b389102514e9e5720b4af89e7aa48b489d4a500
MD5 b9dbd65dd477f78e292494852ed9cfb8
SHA1 d0c78884460fc4fd9810a00c9cd728629db40da4
SHA512 ef139107342dbb251079a800f275dce170891b5ea829395b256adebee60cae4e14fc852a58b0f476b4b7d3d87cc180046e691a855e4edc62c1baace6b53ab96b
SSDEEP 1536:C1PXNPCi/SNa4vmsx90LdV1z3IuvEni6YLvmFxLKB:C1PdfadmacdEuvf6PLK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads