Overview

overview

7

Static

static

3

IRUS Comet.exe

windows10-2004-x64

7

IRUS Comet.exe

windows11-21h2-x64

7

Resubmissions

05/05/2026, 04:01

260505-elj13sb13k7

05/05/2026, 04:01

260505-elh4sab13j

05/05/2026, 03:58

260505-ejwxvsbz9l7

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/05/2026, 03:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IRUS Comet.exe
  • Size 50.4MB
  • Sample260505-ejwxvsbz9l
  • SHA256 62e953a675ce789f884696e01758b98ca10f108af311ce745c8d85c10e85cce2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\IRUS Comet.exe
    "C:\Users\Admin\AppData\Local\Temp\IRUS Comet.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3112
    • C:\Users\Admin\AppData\Local\Temp\IRUS Comet.exe
      "C:\Users\Admin\AppData\Local\Temp\IRUS Comet.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1768
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:4556

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_decimal.pyd
          • Size 271KB
          • SHA256 b715d1c18e9a9c1531f21c02003b4c6726742d1a2441a1893bc3d79d7bb50e91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\_ssl.pyd
          • Size 177KB
          • SHA256 63ae2fefbfbbbc6ea39cde0a622579d46ff55134bc8c1380289a2976b61f603e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          blue.json
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\customtkinter\assets\themes\blue.json
          • Size 4KB
          • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\libcrypto-3.dll
          • Size 5.0MB
          • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
          • Size 19.4MB
          • SHA256 6547e9fb966e9773caee2755e91a8bf4d6f3a2f0eebf9646b0158f8675ea4ab5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _multiarray_umath.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\ONEFIL~1\numpy\_core\_multiarray_umath.pyd
          • Size 4.0MB
          • SHA256 64b08945fb969e50f56fa2e993f018e3eeaa14c077f24efbf3b4cb0bb0606a6a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _imaging.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\PIL\_imaging.pyd
          • Size 2.4MB
          • SHA256 010808cd1eb564aeaee8ba65ab2e20ae07f9bd9cbab8dba1d88931bc6842de0f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_bz2.pyd
          • Size 82KB
          • SHA256 fc3b481684b926350057e263622a2a5335b149a0498a8d65c4f37e39dd90b640
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_ctypes.pyd
          • Size 128KB
          • SHA256 f63c6c7e71c342084d8f1a108786ca6975a52cefef8be32cc2589e6e2fe060c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_hashlib.pyd
          • Size 62KB
          • SHA256 838d5c8b7c3212c8429baf612623abbbc20a9023eec41e34e5461b76a285b86c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_lzma.pyd
          • Size 154KB
          • SHA256 d080eabd015a3569813a220fd4ea74dff34ed2a8519a10473eb37e22b1118a06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_queue.pyd
          • Size 32KB
          • SHA256 b9cf502dadcb124f693bf69ecd7077971e37174104dbda563022d74961a67e1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_socket.pyd
          • Size 81KB
          • SHA256 35246b04c6c7001ca448554246445a845ce116814a29b18b617ea38752e4659b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _tkinter.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_tkinter.pyd
          • Size 64KB
          • SHA256 a6851d7c25a1216d2c8fa5c1d2e9eca3d0392d60e3b7441ad9f66c23ffdd2f08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _wmi.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\_wmi.pyd
          • Size 37KB
          • SHA256 6435c679a3a3ff4f16708ebc43f7ca62456c110ac1ea94f617d8052c90c143c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          md.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\charset_normalizer\md.pyd
          • Size 10KB
          • SHA256 4e66da1baef3b663ab8f48feed4ed1d72e977b4209240595d2c440071bc632c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          md__mypyc.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\charset_normalizer\md__mypyc.pyd
          • Size 125KB
          • SHA256 a26b6459a25f1e9b600ac3df6b2c4f30d7f9d643292546b85ccb763d49fdea90
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-8.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\libssl-3.dll
          • Size 774KB
          • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msvcp140-263139962577ecda4cd9469ca360a746.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
          • Size 561KB
          • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _umath_linalg.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\numpy\linalg\_umath_linalg.pyd
          • Size 105KB
          • SHA256 c6924a5773009521015502ae9f38b7b98ca3d278a3eea1568a01dea9b6464b28
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          p.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\p.dll
          • Size 39.6MB
          • SHA256 bc2208426e1b876b08706d1b0aec9409927fc0b2ee210f4337e52752df409aeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\python3.dll
          • Size 68KB
          • SHA256 a5c6a329698490a035133433928d04368ce6285bb91a9d074fc285de4c9a32a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python313.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\python313.dll
          • Size 5.8MB
          • SHA256 0c0a66505093b6a4bb3475f716bd3d9552095776f6a124709c13b3f9552c7d99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\select.pyd
          • Size 30KB
          • SHA256 78e5994c29d8851f28b5b12d59d742d876683aea58eceea1fb895b2036cdcdeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\tcl86t.dll
          • Size 1.7MB
          • SHA256 c861f39ad0f4fc7f3875850925f61442bff2bc1839bbbb3584a63bc4d6e5cea6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cp1252.enc
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\tcl\encoding\cp1252.enc
          • Size 1KB
          • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\tk86t.dll
          • Size 1.5MB
          • SHA256 6425bf57abcc1dfbbe8662b1956883ae0c5ab8c2d9314e19692b3d86babc242c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\unicodedata.pyd
          • Size 693KB
          • SHA256 2693c7ee4fba55dc548f641c0cb94485d0e18596ffef16541bd43a5104c28b20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vcruntime140_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\vcruntime140_1.dll
          • Size 48KB
          • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zlib1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\zlib1.dll
          • Size 142KB
          • SHA256 8c2ed3e1a90c9b0e3ef844be20e1af791ae8a1b665d4731162404f0eee1697dc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          backend_c.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\onefile_3112_134224271844051230\zstandard\backend_c.pyd
          • Size 513KB
          • SHA256 e05f3f106d6a907d3402a9543dbd0bef6cc28dbb63377685ebd65af87bfb03d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/1768-1056-0x00007FFB3A9D0000-0x00007FFB3A9F9000-memory.dmp
          Download

          memory/1768-1057-0x00007FFB283E0000-0x00007FFB2975B000-memory.dmp
          Download