Overview

overview

7

Static

static

3

Mouse Keyb....0.exe

windows10-2004-x64

7

Mouse Keyb....0.exe

windows11-21h2-x64

7

[rc12time]....0.pyc

windows10-2004-x64

3

[rc12time]....0.pyc

windows11-21h2-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/05/2026, 10:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Mouse Keyboard Clicker Holder v2.0.exe
  • Size 35.9MB
  • Sample260508-mxtcwsfz7x
  • SHA256 7f1a38fd773b31582ca90829feaa7ebbccbad51ff3f95eeaf0f1fbef41e42e9e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 30 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Mouse Keyboard Clicker Holder v2.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Mouse Keyboard Clicker Holder v2.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4984
    • C:\Users\Admin\AppData\Local\Temp\Mouse Keyboard Clicker Holder v2.0.exe
      "C:\Users\Admin\AppData\Local\Temp\Mouse Keyboard Clicker Holder v2.0.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:5824

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Key-Clicker-Holder-white-bg-svg.svg
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\Key-Clicker-Holder-white-bg-svg.svg
        • Size 310KB
        • SHA256 de0c1d8cfe7628ee8de497486595174a355a9c04f9f2015e8a16c42f1af60e22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\Qt6Core.dll
        • Size 5.4MB
        • SHA256 d037dd5176f7a404cd42dec2f6e172bc0938d431039e023080cbb1e6e0e62485
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\Qt6Gui.dll
        • Size 7.3MB
        • SHA256 78285161c08aab7ece80c2ab8e34a1f1455d07b368db88fd26b8c52352d28757
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Svg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\Qt6Svg.dll
        • Size 350KB
        • SHA256 125e0bafabae04fa8e0ef3ff6edea2af90807dc10ce6952789dd3b8e5e51e1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\Qt6Widgets.dll
        • Size 5.8MB
        • SHA256 226e112bcb5a00f576db2278c993d4bad299826c3aecbab1abbfa9f6d281d850
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\QtCore.pyd
        • Size 3.4MB
        • SHA256 d8aa9db9d56da1891388d5893ce6ebf70a0b31658f0a6f1910e7188c18c8f6fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\QtGui.pyd
        • Size 3.6MB
        • SHA256 5bbabc8a95dec58a30cd404589c47d7368878ee1e2d09e87a77b328df2a04b25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\QtWidgets.pyd
        • Size 5.8MB
        • SHA256 ed5194d8d11c86ecd4465517271341db6d8a414e4a5a7650075d4358d792fbe3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qsvgicon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\iconengines\qsvgicon.dll
        • Size 63KB
        • SHA256 014513b4b506700d755819d174b53dee1553b11ecf33c69964d126283abeb756
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qdirect2d.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\platforms\qdirect2d.dll
        • Size 880KB
        • SHA256 f3f98c1054e0552981416a4de211f60b60efb0b9ac13b2eb4442788eb13a8f5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\platforms\qminimal.dll
        • Size 58KB
        • SHA256 57c2e3cc74626e9cb5b4f4fd90fc843d4047d44abd618b6f25aa5b4e962d4233
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\platforms\qoffscreen.dll
        • Size 104KB
        • SHA256 6849ac1bb47f66eb24d7775dd5eeff4f4c2a6f1695fe54236128238fb0794d21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\platforms\qwindows.dll
        • Size 808KB
        • SHA256 c2565cf956fd29e95d2f5e815f303af7b872c733b19bc0518fc5965e51659178
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindowsvistastyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\plugins\styles\qwindowsvistastyle.dll
        • Size 149KB
        • SHA256 0f36ec9320b644b7f1a9e2aa336bab5882200a094c77914f0de2407ca1d8348b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyside6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\PySide6\pyside6.abi3.dll
        • Size 202KB
        • SHA256 7cd15f86a0014c338c8b93d749ef891c11f448d37340e6b019f33aff41f5612f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\VCRUNTIME140.dll
        • Size 96KB
        • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\_bz2.pyd
        • Size 81KB
        • SHA256 5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\_ctypes.pyd
        • Size 120KB
        • SHA256 e662d2b35bb48c5f3432bde79c0d20313238af800968ba0faa6ea7e7e5ef4535
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\_lzma.pyd
        • Size 154KB
        • SHA256 613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\_queue.pyd
        • Size 30KB
        • SHA256 2f71046891ba279b00b70eb031fe90b379dbe84559cf49ce5d1297ea6bf47a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\base_library.zip
        • Size 1.7MB
        • SHA256 abce5c8e60e9335ea25fd5c6132129f3b6e9ac3ba62bf88bc69e39b01223f1d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\libffi-8.dll
        • Size 34KB
        • SHA256 128a583e821e52b595eb4b3dda17697d3ca456ee72945f7ecce48ededad0e93c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\python3.dll
        • Size 64KB
        • SHA256 4055d1b9e553b78c244143ab6b48151604003b39a9bf54879dee9175455c1281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\python311.dll
        • Size 5.5MB
        • SHA256 a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\MSVCP140.dll
        • Size 603KB
        • SHA256 f87819ae8c6f7c90d3237a1abb9809e8cba9dcd0c80ac3f0969a5e68ef652ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\MSVCP140_1.dll
        • Size 30KB
        • SHA256 b05f3dfd4e999c3e110219fb59151cbaa322757f4f3ce52b64dddc853e5c105c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\MSVCP140_2.dll
        • Size 198KB
        • SHA256 7d5d180c8e41b1964835b2550191e2d9054d8f4beff898ade67b3d5dd25b5101
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Shiboken.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\Shiboken.pyd
        • Size 18KB
        • SHA256 af44841402595f233d8ba731c3eeefeab77c9f28f4239eb525a50c3bfc2721c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\VCRUNTIME140_1.dll
        • Size 43KB
        • SHA256 6cc4315daceb0522816c60678344466cb452426267f70c7faae925361674e774
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shiboken6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\shiboken6\shiboken6.abi3.dll
        • Size 275KB
        • SHA256 c5a8e8fe72b14e3acd53b25ebb52d861fb3bed3e06aac68058a7815849cbab8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49842\unicodedata.pyd
        • Size 1.1MB
        • SHA256 ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5824-127-0x00007FFF425C0000-0x00007FFF42BA4000-memory.dmp
        Download

        memory/5824-148-0x000002566DE80000-0x000002566DE90000-memory.dmp
        Download

        memory/5824-139-0x00007FFF40F90000-0x00007FFF41307000-memory.dmp
        Download

        memory/5824-136-0x00007FFF51DF0000-0x00007FFF52196000-memory.dmp
        Download

        memory/5824-133-0x00007FFF41FF0000-0x00007FFF425B5000-memory.dmp
        Download

        memory/5824-157-0x000002566E940000-0x000002566E9EF000-memory.dmp
        Download