Overview

overview

7

Static

static

3

GUI v2.exe

windows10-2004-x64

7

GUI v2.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    29/04/2026, 02:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GUI v2.exe
  • Size 15.7MB
  • Sample260429-cremfaby2q
  • SHA256 c61c54a4baeb619e54ed00a04984c3184cc85ed53b1aa337db3e30198cc82202
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GUI v2.exe
    "C:\Users\Admin\AppData\Local\Temp\GUI v2.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3400
    • C:\Users\Admin\AppData\Local\Temp\GUI v2.exe
      "C:\Users\Admin\AppData\Local\Temp\GUI v2.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\MSVCP140.dll
        • Size 606KB
        • SHA256 c8f1fd703f67c2b39c9175dde34fef37bd3e31ab68f57de1f12a01a31ac6fae4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _brotli.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_brotli.cp311-win_amd64.pyd
        • Size 732KB
        • SHA256 79e60cd8bfd29ad1f7d0bf7a1eec3d9abadfce90587438ea172034074bc174ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_bz2.pyd
        • Size 82KB
        • SHA256 a4dd883257a7ace84f96bcc6cd59e22d843d0db080606defae32923fc712c75a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_hashlib.pyd
        • Size 63KB
        • SHA256 e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_lzma.pyd
        • Size 155KB
        • SHA256 1796038480754a680f33a4e37c8b5673cc86c49281a287dc0c5cae984d0cb4bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_queue.pyd
        • Size 31KB
        • SHA256 35609869edc57d806925ec52cca9bc5a035e30d5f40549647d4da6d7983f8659
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_socket.pyd
        • Size 77KB
        • SHA256 74181072392a3727049ea3681fe9e59516373809ced53e08f6da7c496b76e117
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\_ssl.pyd
        • Size 157KB
        • SHA256 5160500474ec95d4f3af7e467cc70cb37bec1d12545f0299aab6d69cea106c69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\base_library.zip
        • Size 1.8MB
        • SHA256 ff6a37c49ee4bb07a763866d4163126165038296c1fb7b730928297c25cfbe6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\charset_normalizer\md.cp311-win_amd64.pyd
        • Size 10KB
        • SHA256 f1e26ef5d12c58d652b0b5437c355a14cd66606b2fbc00339497dd00243081e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
        • Size 110KB
        • SHA256 a4a758eabd1b2b45f3c4699bdfebc98f196dc691c0a3d5407e17fffffafc5df7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 f20eb4efd8647b5273fdaafceb8ccb2b8ba5329665878e01986cbfc1e6832c44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\libssl-1_1.dll
        • Size 688KB
        • SHA256 c8f7237e7040a73c2bea567acc9cec373aadd48654aaac6122416e160f08ca13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\python311.dll
        • Size 5.5MB
        • SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\select.pyd
        • Size 29KB
        • SHA256 c4aa9a106381835cfb5f9badfb9d77df74338bc66e69183757a5a3774ccdaccf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\ucrtbase.dll
        • Size 994KB
        • SHA256 36cc22d92a60e57dee394f56a9d1ed1655ee9db89d2244a959005116a4184d80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\unicodedata.pyd
        • Size 1.1MB
        • SHA256 8fbed20e9225ff82132e97b4fefbb5ddbc10c062d9e3f920a6616ab27bb5b0fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _core.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\wx\_core.cp311-win_amd64.pyd
        • Size 7.9MB
        • SHA256 c6f4d1cb8f0339b0d78e4a284fa32b720a1c14fc292b28544fb4b26201f78c79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        siplib.cp311-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\wx\siplib.cp311-win_amd64.pyd
        • Size 129KB
        • SHA256 200834d957a344d9585c2f0f7576584231adb2d34a8cb6101fcca11fd2dfd93d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_net_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\wx\wxbase32u_net_vc140_x64.dll
        • Size 251KB
        • SHA256 1ade6d2bf474fc2a3e75d083b24f01735f4185d223fe1d37c5dd0c52842d31eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxbase32u_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\wx\wxbase32u_vc140_x64.dll
        • Size 2.8MB
        • SHA256 b2b6c53cb73e888e5ed20db8042887905e3b7b1248f64b6ed512cf71465cdeb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wxmsw32u_core_vc140_x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34002\wx\wxmsw32u_core_vc140_x64.dll
        • Size 8.1MB
        • SHA256 ff90c70ebea99acccc9623f13c61724e4f1028f73ba422240aa8fd3490a27d49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2988-88-0x00007FFBF8750000-0x00007FFBF8F40000-memory.dmp
        Download