Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/06/2024, 18:24

General

  • Target
    beamer.exe
  • Size 7.8MB
  • Sample240608-w2b4vafb97
  • SHA256 fc244225ff7462e39593638fb615df04b4ea8cd350412f7a92e945ad863152ec
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\beamer.exe
    "C:\Users\Admin\AppData\Local\Temp\beamer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1304
    • C:\Users\Admin\AppData\Local\Temp\beamer.exe
      "C:\Users\Admin\AppData\Local\Temp\beamer.exe"
      2⤵
      • Loads dropped DLL
      PID:1168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\_bz2.pyd
        • Size 82KB
        • SHA256 02d772c03704fe243c8de2672c210a5804d075c1f75e738d6130a173d08dfcde
        • MD5 SHA1 SHA512 SSDEEP

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\_decimal.pyd
        • Size 247KB
        • SHA256 a28c543976aa4b6d37da6f94a280d72124b429f458d0d57b7dbcf71b4bea8f73
        • MD5 SHA1 SHA512 SSDEEP

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\_hashlib.pyd
        • Size 63KB
        • SHA256 e47e76d70d508b62924fe480f30e615b12fdd7745c0aac68a2cddabd07b692ae
        • MD5 SHA1 SHA512 SSDEEP

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\_lzma.pyd
        • Size 155KB
        • SHA256 34130d8abe27586ee315262d69af4e27429b7eab1f3131ea375c2bb62cf094be
        • MD5 SHA1 SHA512 SSDEEP

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\_socket.pyd
        • Size 81KB
        • SHA256 b38e66e6ee413e5955ef03d619cadd40fca8be035b43093d2342b6f3739e883e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 b7b0f0d7d23a380e5293af436074041eecc9f9915518cede68617d748663bc30
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 b510157f4236067531d2f7e0e6e4605a2a6b717a325436f56f1e351fa972265f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 298e2da65824ed1f8331bf665a9241dc762ce792b8a45666b42eed6df2926af2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 e31752d0bed213444123b090e0d40a94145309068b7bb730e917c030fb932373
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 16e45b124ba82b11d410cb626cc5e276f6a4f20951ba6aa7a2bbf0405a19e8c0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 3d5fd8b11b0053e340c2e7da097c58dc155cd3d276b730c92a3da8a6b92b3de6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 796896827a8eb53cfc40e49ffd56ce4c5e40671c94b8102f97dce67a351e997c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 94d0ea1ff3707665bbbe9942d000e497306504575bee4e687fa8a51a29b841e6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 f3c4c68560d81ed66833344d3837226305c1783e8c7eb63a3a8cdbb486a13424
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 1157addecb75bbb30a5b9a34a585c6dc4a86cd9c7c1e0f06251b9089a5c52c50
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 7eb0003032fd3ae570131542fe76eefc577053853c1038ec3cd41200139a2880
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 ab879736474cb9d674614c784f90f8a37428a6c0bef8fe7c9b23b878f579ced0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 fb37e0ad35ca4446e9edafdf5c2ac55cae0b40f3a609f6fa63688d2f5bc90df4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 60b055a609bd494f7f068e83f62736667bfa535fbb4029ad79c86803239be4a6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 1321a4320d7219ab5705740a1ce7772b6964e54fa6939226d03ca921c691d32f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 dc93bf02d20ac6ee5739039902a912bbfdf14209ec285cabb4ec38fa76e061f1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 2192b2f4c2503aa67aded86d2bb2935d35c4855cad0028fec35cd0f7e15b9666
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 eb299c380b9149f65ce7be6945a2a2eb0e63bfa87a27759e456b7050eb744cdb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 17b4aa89f9a1d5417d5b08bf39b92c20a604985175fc01642a5d32a70454bffe
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 b1ba7e57cbb3ea32d5d543fd362d6926f405a6b19bc63a29a8fa315b67bb1904
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 e646c55398a86e1608932142b48cabe8a5e9a6a180d62de7dc6f9f03180916ae
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 b7745d27bd514c922a1ed88752158d305c2f03750928b96c7eba8626541454ad
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 d621c85017dbd7a4f1a680390cd0f5e41a342040b1759b4a71d649dfcd107dbb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 a643d8c79a00b643164d904a10ce76a3995b7824c789eb8a0d09de09d2d6e8a0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 049c9a49353416701a0672985800734e515be2b5f5445fb5fb3813845460008e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 e32d799aef40c0b6800695120e0f4d679885bb6279000b93a83dc72e23ba5f96
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 bee5f5c75cc53c8547d6fac8879f0915a6aec8966081dcf9f401641c2441b4a7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 7300fc68654b6971c74d439daec941afd2b9e50b4486bbbbeed1fdadd5e2c911
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 36e6706e9534a3af711a1cb5b872b5970622ca403ffb887fd54bd3de5e9b8065
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 3aa7e38f1592772cb5caaefa61c31efd48d24cf96228518de800028e86b5eb1c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 e03ebd9dae8a95971e59078a8570f39f37f88b711b82b04142870a3cda7fd8ff
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 69123104bda1bf904ae73aef9b21e4ce31f8e9deda130204e1b0643949f07988
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 2cc40ecfabe7b5b7a73371416230c48c6c6832ad450b4a9e76e30dce6b9e7dc1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 f782057fdb4eac1425dd199353a8842d7309573db1f7f6e5dbbd47c82ee1f3c0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 4c08e783131304dcd7c226160f95bdccfe5b20ff4d7e06f5fc46c27f6e0a238a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 1dd96103e0abe510e617d36670b70c12779aa4f9e42728eebc5007bf54a9b178
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 739fef6f881821760079bb9cb2d899400d49138ddcf921761705d09e668d6d28
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 e9be57232e7041c1384488913da4ce80782c41ba43cded84e3bdb7679c379c90
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 e40243c8a919f160765901c4404dd6693fc308dc8d9f0dc009f423110113de22
        • MD5 SHA1 SHA512 SSDEEP

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\base_library.zip
        • Size 1.3MB
        • SHA256 56cce68da6a7ebd11aab4b4a4e6a164647b42b29ae57656532c530d1e22e5b44
        • MD5 SHA1 SHA512 SSDEEP

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\libcrypto-3.dll
        • Size 4.9MB
        • SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
        • MD5 SHA1 SHA512 SSDEEP

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\python312.dll
        • Size 6.6MB
        • SHA256 e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce
        • MD5 SHA1 SHA512 SSDEEP

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\select.pyd
        • Size 30KB
        • SHA256 bc71fbdfd1441d62dd86d33ff41b35dc3cc34875f625d885c58c8dc000064dab
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\ucrtbase.dll
        • Size 1.1MB
        • SHA256 1e316042bf54883cde951203633b087c2dcfdb2195af0526fb9d686541b14950
        • MD5 SHA1 SHA512 SSDEEP

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13042\unicodedata.pyd
        • Size 1.1MB
        • SHA256 2480a78815f619a631210e577e733c9bafecb7f608042e979423c5850ee390ff
        • MD5 SHA1 SHA512 SSDEEP