Resubmissions

29/05/2026, 06:03

260529-gr889sdv8j9

15/05/2026, 01:52

260515-calpesf18k7

Analysis

  • max time kernel
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    15/05/2026, 01:52

General

  • Target
    Florence_app.exe
  • Size 71.4MB
  • Sample260515-calpesf18k
  • SHA256 6e858243653f1eaa772f8bee29b68d939dd895201ee2c5a5317acbbcc2d5c9d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Florence_app.exe
    "C:\Users\Admin\AppData\Local\Temp\Florence_app.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:6040
    • C:\Users\Admin\AppData\Local\Temp\Florence_app.exe
      "C:\Users\Admin\AppData\Local\Temp\Florence_app.exe"
      2⤵
      • Loads dropped DLL
      PID:4052

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\PIL\_imaging.cp314-win_amd64.pyd
        • Size 2.5MB
        • SHA256 b4e06283c347910b5973bd5732159ea9eb26eda48e3eed183be2e3382db26597
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_bz2.pyd
        • Size 85KB
        • SHA256 33641a8ad0403473d678c7435197d49550fc5185ba7979fb16ab80256b1f9072
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_ctypes.pyd
        • Size 139KB
        • SHA256 79967d8614f735cc62b81649641fd8d0414ca66d3d6656fa7788334bbdbbd35b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_decimal.pyd
        • Size 284KB
        • SHA256 1f4a8ca9814508d3597992173fdf4db312f3b970f6baeb053b9d8c3087f907e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _elementtree.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_elementtree.pyd
        • Size 135KB
        • SHA256 557da5278599b51f1c0a53b2ffc617a05a21be23a2a6b862a5b5ce04667c5f70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_hashlib.pyd
        • Size 67KB
        • SHA256 58c5c9ff93f989e2a233b8c5e06420ea73dd6c013e1f08d996fb0f2828eba0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_lzma.pyd
        • Size 157KB
        • SHA256 a01f1927adaa60adcfbe3b0314205a528cb9dd5a93b7e61cb284eddee9b0b347
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_queue.pyd
        • Size 35KB
        • SHA256 2a7bb0a53e86ae4982a6f64e2570137829a0be66537bb1c166913af273edbf0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_socket.pyd
        • Size 85KB
        • SHA256 435a86973131c5d5dc90f828e72d7bb0607578a48ab5bc5377f4a280a6beb8f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_ssl.pyd
        • Size 180KB
        • SHA256 06f51fbe150c831af619890eea2d9fca9ce8b49758bfe3f382883551c592e6b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        auto.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\auto.tcl
        • Size 21KB
        • SHA256 08113823951619d659eb03a1f6acd2f9500e1264795219125a5df7b83cabcb99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\http1.0\pkgIndex.tcl
        • Size 746B
        • SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
        • MD5 SHA1 SHA512 TLSH

        init.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\init.tcl
        • Size 25KB
        • SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\opt0.4\pkgIndex.tcl
        • Size 636B
        • SHA256 68accee3eb8d0f134f9472c95425190ec08e7793df20a58d7d35325f42804695
        • MD5 SHA1 SHA512 TLSH

        package.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\package.tcl
        • Size 23KB
        • SHA256 b471cec9056b62d562020b14d69d4bd1f92dfe158afc8ba81c6341836211ca46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tclIndex

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\tclIndex
        • Size 7KB
        • SHA256 577f042bbe640e2739606a1f76098abdb8bd1d1f31526402fb82b21091644f65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tm.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tcl_data\tm.tcl
        • Size 11KB
        • SHA256 f0cc13daca21fee538cca757aa09e88a969a85174eda26e61e573dda6c7ba413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        button.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\button.tcl
        • Size 21KB
        • SHA256 1f5dd8d81b26f16e772e92fd2a22accb785004d0ed3447e54f87005d9c6a07a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        entry.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\entry.tcl
        • Size 18KB
        • SHA256 6ac78f764434f932d37e8183aa6db5d04eb1848b774c92f7abc243ecb7d4a59b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\icons.tcl
        • Size 10KB
        • SHA256 1264940e62b9a37967925418e9d0dc0befd369e8c181b9bab3d1607e3cc14b85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        listbox.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\listbox.tcl
        • Size 14KB
        • SHA256 47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\menu.tcl
        • Size 39KB
        • SHA256 ae4ee8400174c798337b9c60867cbc94f811b249ebe6dea21ec6f960bcf5f8cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        panedwindow.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\panedwindow.tcl
        • Size 5KB
        • SHA256 aa4f87e41ac8297f51150f2a9f787607690d01793456b93f0939c54d394731f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\pkgIndex.tcl
        • Size 376B
        • SHA256 6127926b94db2992ab450fc6cc2ec3d071f7bbc856656d0ae20cc3fd4036f547
        • MD5 SHA1 SHA512 TLSH

        scale.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\scale.tcl
        • Size 8KB
        • SHA256 0747a387fdd1b2c7135eceae7b392ed52e1d1ebf3ffa90febe886dbc0981eb74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scrlbar.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\scrlbar.tcl
        • Size 12KB
        • SHA256 eec90404f702d3cfbfaec0f13bf5ed1ebeb736bee12d7e69770181a25401c61f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spinbox.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\spinbox.tcl
        • Size 16KB
        • SHA256 747889c3086c917a34554a9dc495bc0c08a03fd3a5828353ed2a64b97f376835
        • MD5 SHA1 SHA512 SSDEEP TLSH

        text.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\text.tcl
        • Size 34KB
        • SHA256 f7ecc5ae6eb297c79aad5cfc200b29c4e72409641fa369c5cdbba30ae41e982a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\tk.tcl
        • Size 23KB
        • SHA256 b7fd24177b17f67da2ca671f711309c65cf246be1fd0cf4f1ab8f3ea9ca2c3f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        button.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\ttk\button.tcl
        • Size 2KB
        • SHA256 e38a9d1f437981aa6bf0bdd074d57b769a4140c0f7d9aff51743fe4ecc6dfddf
        • MD5 SHA1 SHA512 TLSH

        cursors.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\ttk\cursors.tcl
        • Size 4KB
        • SHA256 5b33f32b0139663347d6cf70a5a838f8e4554e0e881e97c8478b77733162ea73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fonts.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\ttk\fonts.tcl
        • Size 5KB
        • SHA256 6574067a91858506460ac44ddf8cf9270e81d67b2feff2a43b4d5f774568a5ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ttk.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\ttk\ttk.tcl
        • Size 5KB
        • SHA256 685398e8db93aebbabfed795e91a42a87aa0e2a2cf23bfcffd70fea085a7ad5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        utils.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tk_data\ttk\utils.tcl
        • Size 8KB
        • SHA256 b9b73e5bcd85c8fe00628332f0ab0c4a0ffbb59f7b4e9d6cdc92762a5bcd8d76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_tkinter.pyd
        • Size 67KB
        • SHA256 b7bc5c036699510968ff5040a392de8fe612fa66dad01fbb5d66df56db554a8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _zstd.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\_zstd.pyd
        • Size 491KB
        • SHA256 e5924e2985186797668dd3b2e1efeb9313459258a4564dbf5499935c7ebd44e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\base_library.zip
        • Size 1.3MB
        • SHA256 41cb83d0ea591c2f17883837b60642ae938cfa6b181c73b2151fdfa598cdfeac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        favicon.ico

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\favicon.ico
        • Size 30KB
        • SHA256 ea20f3bc4b2f57f85685c8912580a0b3542dde3c25f524dc276083b15ceb6ffa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 eaf6d613b95b61a39558d84c50e72630a66c99914292df88e7b54ebd60c5bd34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\libssl-3.dll
        • Size 776KB
        • SHA256 cf1a5fdcefa3daf69041f31f98ece1d7911ca4fcb8e9f1043b4d0f459ae4c936
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\pyexpat.pyd
        • Size 213KB
        • SHA256 05530afc9cbfe68c28c052eec159b852e731316007e1f52e0a31412e4eda07f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\python314.dll
        • Size 6.5MB
        • SHA256 a07f7d09c3121492bb066535c6d0811df5fbc2090cbca7031a97bb47ce1480c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\select.pyd
        • Size 32KB
        • SHA256 56441c3148743a0890986ccdf93fea8174155b0ee84db2493151f075d8e7c51a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\tcl86t.dll
        • Size 1.8MB
        • SHA256 2ef3a547ba6aed3b366cd1dbac63a7f1886dac9602417b5abbe6f51ffc57e8c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msgcat-1.6.1.tm

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\tcl8\8.5\msgcat-1.6.1.tm
        • Size 34KB
        • SHA256 adca186be560f2236265f538d4cb6df1171bed91192118796988bb9c08a4bc7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\tk86t.dll
        • Size 1.5MB
        • SHA256 d385c7f764a91967702521b1514782caaa00f696d74ae6666993b72cd0d13860
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\unicodedata.pyd
        • Size 740KB
        • SHA256 58013696b4f08717aee2885aefa24031f4b18b3e62faa8125248cc3e0a86af2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60402\zlib1.dll
        • Size 144KB
        • SHA256 c7c6a89c3c6d3529008902100530e8e591b31225e95029da6a3253ec5fc8b725
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4052-1244-0x00007FFDF07A0000-0x00007FFDF07C9000-memory.dmp