Overview

overview

7

Static

static

3

LILLYVIRUS v2.exe

windows10-2004-x64

7

Resubmissions

13/09/2026, 20:32

260913-zbdrjadn71

30/08/2026, 00:54

260830-a9heyaxzhv7

05/02/2026, 22:08

260205-12hzlsbz8a7

05/02/2026, 22:04

260205-1y9yxsbz6a7

17/10/2025, 14:13

251017-rjgt6asrw5

28/06/2025, 20:16

250628-y2abcshr9w7

25/05/2025, 14:46

250525-r5j7easnw77

13/05/2025, 19:57

250513-yprd4szzcx8

13/05/2025, 19:57

250513-ypqskszzcv

13/05/2025, 19:53

250513-ylzajszzav7

Analysis

  • max time kernel
    142s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250610-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250610-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2025, 20:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    LILLYVIRUS v2.exe
  • Size 27.3MB
  • Sample250628-y2abcshr9w
  • SHA256 81cf19d82cbfc80d9dd92271bac8f358a89cfa819407474ebab9de0399c862d8
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 43 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LILLYVIRUS v2.exe
    "C:\Users\Admin\AppData\Local\Temp\LILLYVIRUS v2.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3228
    • C:\Users\Admin\AppData\Local\Temp\LILLYVIRUS v2.exe
      "C:\Users\Admin\AppData\Local\Temp\LILLYVIRUS v2.exe"
      2⤵
      • Loads dropped DLL
      PID:2840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\PIL\_imaging.cp312-win_amd64.pyd
        • Size 2.3MB
        • SHA256 286cb70bff80bcfd68e8bcec15f019a433c213e9af1998a241177009cb2acb39
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_asyncio.pyd
        • Size 72KB
        • SHA256 bac2870d61a72be50cabc968be924147132036185b3b538aa3b1b43d8c828a2e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_bz2.pyd
        • Size 84KB
        • SHA256 178c6eeb30843e656cc407aaf53ae6d0f170966e4e0bdd2ee1bede73962275cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _cffi_backend.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_cffi_backend.cp312-win_amd64.pyd
        • Size 175KB
        • SHA256 86f136553ba301c70e7bada8416b77eb4a07f76ccb02f7d73c2999a38fa5fa5b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_ctypes.pyd
        • Size 124KB
        • SHA256 9ffdedd0f1f09f21870bd75c08d05c32994a1193be3955e367f260690a36cbd0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_decimal.pyd
        • Size 251KB
        • SHA256 847e2b2c69ca623e0f96bbda0f421ca978fbb5925beec4cc5e4c5d9c966c4bbc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_elementtree.pyd
        • Size 132KB
        • SHA256 9dead134ccd6c3c2e2bdbed8a02b5853200deb11aa2a22b926f9f2955d3f5143
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_hashlib.pyd
        • Size 65KB
        • SHA256 823717926adce6b36f9c13b6555eaeaf5714c4756828f11cffc1ce0bef970a7e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_lzma.pyd
        • Size 156KB
        • SHA256 f6e0c786395ccc7b22f4c435b19f7073eb5974eb29e09f4c91060cab10450e6a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_multiprocessing.pyd
        • Size 35KB
        • SHA256 b66a5a1a4aa1f187cc349e7548c3cf6d815552937a6a1d33ecc87b76794a1939
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_overlapped.pyd
        • Size 55KB
        • SHA256 0e6081da5bbf8fcd756b02153ab7fca12bd0bc04842abe5765f7409af4987b17
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_queue.pyd
        • Size 32KB
        • SHA256 37622ca591fb8e45a894db9c0da99bfcb18a820a48f028e4949d9256b69247e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_socket.pyd
        • Size 83KB
        • SHA256 0e2c1089974a2757426dac3295201a33c990c36f3c09593f8a2b6e07fd36b99c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_ssl.pyd
        • Size 175KB
        • SHA256 81344e3e16cf6f2d5b24cc0cf92e95c5fd0592e4a3859bb00c3f5891e2482128
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_tkinter.pyd
        • Size 66KB
        • SHA256 96d318146ce3f329209799e4d547c28c0d4b5ab5040da19221ef815540b5f78e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\_wmi.pyd
        • Size 39KB
        • SHA256 af1077d6377d5a0aea123f0c324cc6d151ac4a29a84aae23a6936b6d1c64b70a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        background.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\background.png
        • Size 2.4MB
        • SHA256 f2750f0f898abd65a35d98dd21a52c502f3f2ca86f861d145d9bdeb466354bbc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\base_library.zip
        • Size 1.3MB
        • SHA256 13e24b36c20b3da9914c67b61614b262f3fc1ca7b2ee205ded41acc57865bfef
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\charset_normalizer\md.cp312-win_amd64.pyd
        • Size 10KB
        • SHA256 5c11b2fbe20a75aedcde205fbf0fdda2fa1ca9bd914ae72656dc6fb651bfded0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md__mypyc.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
        • Size 122KB
        • SHA256 ffe8d64a38b4060055beb2076e669b61034c045e3ec53bac74ee66bba3fc26c0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        disclaimer_btn_no.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\disclaimer_btn_no.png
        • Size 1KB
        • SHA256 aca55156e03bdb4ce30377df4e579f1a87fb85696a9f8ee3a45efc807a90839a
        • MD5 SHA1 SHA512
        Submit Download

        disclaimer_btn_yes.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\disclaimer_btn_yes.png
        • Size 1KB
        • SHA256 e7ec9477697402695daf6285e52914727b66bdecfa83dc325045312bc3b556bd
        • MD5 SHA1 SHA512
        Submit Download

        disclaimer_gif.gif
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\disclaimer_gif.gif
        • Size 309KB
        • SHA256 2588d34b44bb7606c60fbcae01f0460cd7e79295611e5d97e4df2dd90734db1b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        disclaimer_main.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\disclaimer_main.png
        • Size 414KB
        • SHA256 ffcf52dbfd6b83cd9cc5f5cb57cc7e9786c83be9140db800e6fd1179693356d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gui1.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\gui1.png
        • Size 1.0MB
        • SHA256 99328881bd7e700ad7117ba21abfc4bc001d96a64ed3528d85f62f42d8e143cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        icon.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\icon.ico
        • Size 66KB
        • SHA256 8829066bf69fceb8b8e7c46e3e152fe1996d2635b1c629b49387850c726dea0e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\libssl-3.dll
        • Size 774KB
        • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\pyexpat.pyd
        • Size 198KB
        • SHA256 fb0be386ab5bc1695e47e49220f52beee99239bbe85c1749694a8a696054865f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\python312.dll
        • Size 6.6MB
        • SHA256 3b56fa10d3797c231468cee42caeaaaff40dbede7bc0d142ec4878493f48e07d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\select.pyd
        • Size 32KB
        • SHA256 fcac4646ff709ac07aee532c4612a19b7070f2dd6ef67ba09c743644e92f7376
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Lorem ipsum.txt
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\tcl86t.dll
        • Size 1.8MB
        • SHA256 808960f1810e03cfd153be3d9ee9bf01717904c8a23bdcf22d98ff766e33ab96
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\tk86t.dll
        • Size 1.5MB
        • SHA256 aaa0f414484211caf42a0807a3afd70c53b172f59d05dfd9f1fc55244c26dc3b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\unicodedata.pyd
        • Size 1.1MB
        • SHA256 e7fe7ae7342b1dec8dfe52a95d768039a46189209b9f42a21c4d2473faaa1753
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI32282\zlib1.dll
        • Size 144KB
        • SHA256 fc431c484e7d6f004d056ac215d6b7e3deb9c41a597065fc840b311e81adf1b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/2840-1226-0x00007FF9F4060000-0x00007FF9F4089000-memory.dmp
        Download