Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/05/2026, 16:26

General

  • Target
    dupeinjector.exe
  • Size 7.0MB
  • Sample260507-txrbvsbv8p
  • SHA256 eb3847caf22fd89ddea0bc6769228b01dc49bc46cf3e59878e4dd6e6c947cac8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dupeinjector.exe
    "C:\Users\Admin\AppData\Local\Temp\dupeinjector.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4812
    • C:\Users\Admin\AppData\Local\Temp\dupeinjector.exe
      "C:\Users\Admin\AppData\Local\Temp\dupeinjector.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:3512
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c cls
        3⤵
          PID:2400

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\VCRUNTIME140.dll
          • Size 117KB
          • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _bz2.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_bz2.pyd
          • Size 84KB
          • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_ctypes.pyd
          • Size 124KB
          • SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _decimal.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_decimal.pyd
          • Size 255KB
          • SHA256 aeacfead2befcc0768063a037bb64bd32109ae09cb144e5f571b04dd7965db9d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _hashlib.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_hashlib.pyd
          • Size 67KB
          • SHA256 03d233dbace599168eaffec823de6ed7beec8c2a4ebfe9b8a3d8e042a59af3ba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _lzma.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_lzma.pyd
          • Size 157KB
          • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _socket.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\_socket.pyd
          • Size 83KB
          • SHA256 3efa4636cf9e350856f6927d67a4c2564bf9bd2758a00bbf17d3aece5b60016d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\base_library.zip
          • Size 1.3MB
          • SHA256 ccc1893ea1241bbf482e14a3fd5c95a33b8c38f0546e08e9220d62e1ae1414f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libcrypto-3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\libcrypto-3.dll
          • Size 5.0MB
          • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-8.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python312.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\python312.dll
          • Size 6.6MB
          • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
          • MD5 SHA1 SHA512 SSDEEP TLSH

          select.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\select.pyd
          • Size 32KB
          • SHA256 d4d7181b11db0bd22a6cd5cda6f8583d1f5c77615fd0a6ca33350619d6e0438a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          unicodedata.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI48122\unicodedata.pyd
          • Size 1.1MB
          • SHA256 208ee1cd3cbad0828433ca7246b05be2b1ff5569983d27d296c0b38888585488
          • MD5 SHA1 SHA512 SSDEEP TLSH