Overview

overview

7

Static

static

3

spoofer.exe

windows10-2004-x64

7

spoofer.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    16/05/2026, 18:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    spoofer.exe
  • Size 34.4MB
  • Sample260516-wref8abv2l
  • SHA256 ff845c68668ea3881a63683ab04ad7fe0de107a70589f767da6f8aed88bcb9cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 29 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\spoofer.exe
    "C:\Users\Admin\AppData\Local\Temp\spoofer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Users\Admin\AppData\Local\Temp\spoofer.exe
      "C:\Users\Admin\AppData\Local\Temp\spoofer.exe"
      2⤵
      • Loads dropped DLL
      PID:6052

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MAPPER.exe
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\MAPPER.exe
        • Size 385KB
        • SHA256 91f988d83b4c583c406291e3ac2f1ded256f8c94577ddb69f6dc42706322b122
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\_bz2.pyd
        • Size 84KB
        • SHA256 8768315b1e0e81ccd0d96c3d6a863803f5dd1de6af849285c439d61abd32b647
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\_ctypes.pyd
        • Size 129KB
        • SHA256 6e804ed42cca2eb401a896fe9542201d4d77df22acbd935a3c56dc68530dae33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\_lzma.pyd
        • Size 156KB
        • SHA256 80df30ed0f2c532c07ea7fdc44836e40a8ebd9e7611365a1a26989147e1a4210
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 b83848a0ba640bfce9f6ab328603074a40b6628545c1c62c9da8951421ebf1bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 b5f48c375c494b2c6e7f2e2987734555390a62a3ce03c7a5a329502745b5676f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 6d40b73ddafe48a5e359a1bc97740c24971db2e17e05e3f81dcc0587bd72d258
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 217f2077b4030f414f6288eb7778f3b0a621b9a6a927681898ed1eea057eee48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 38c2797745a3129998933243a0330026abe236164012b1758a5f814e9ea0519b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 b44716ced3ee3372d3aaff8fad65baa9010ce2688db2f2481f0885e17958fa5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 0b326eca20350f7441214312ee09ee3d91cae8eb194cc832105da42934c84c75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 32194f844aefd85b0b69104ee19e8ce5f5fbf65dd8651c3be4e2f85881ec7a24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 552f01769281cd426185de6bd97887dcaa605e6fc9a9d52ac5fc72887a0a4767
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 e6460585623349cd1c1a34ba68ea152d1f8bda10391e7bb202557560072d5c32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 a94f5b4dc592ae023f91289db98cfb719c185770c13989524ea300915d82b76e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 deca9916b3e4d679899f045516abe68de7c71ce7f4ceac4583c7d20dca99f129
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 1c5e6a989fa53907fb00106fac27e6a76d2ed3b048700160872205e93ee6e9c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 a26c935818edf61502723f0ddcc22039d90a356140deead2bca9adcf3e5b1b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 9458eefbecd0ea5c26902fc97a833266e5116ef25de4e0ed82fc12226194a6cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 e7d9c0a53d2450c65d0a5902698ec9bea75534eb98e2bce5833e94ba563c25e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 187c30efe9139b203515e776e25714f99ffe403ed1776f42966f8e3f2474f918
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 91fbbea8d66aaf6544b8df3992e799cde2965a82c63551d6f260f3788b1fd97a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 1251250992ab4911a6434ef8ff177381e5ec1810e8c1d9355593bbc3a74e9096
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 9057474a78e9667ab4aa6ea29810328d07d1e0aa82c1f214e0804fa22e5c9bc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 14fc2179760badde292a179cffafdbccc33f7af7896857c5a6059c9c53806b51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 4be5579133355ce7827e3ddb329692c0e1b4797ef3a26f064171a707dfdbe75a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 2d90b108c942ef771a5e4427edba6a0b9cb828bb8ed1566d3d774c14b5a9023f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 43a700d662b642d01225f840bc09be6cb80fd24d27015da8d517a9a93a20fcd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 3ffdb6c2e2fd15d90b0f121e499eb739219db40f24fa53e86118844c612db984
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 fe8042d5e79112ed048462902c13d57603fa34b61696def3716ba341b9359660
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 6d176c1f0fe82ab07fcf0f3973a3f3b1a0e5d23453ef0beded0a6d3f3b3c0db5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 51a40d105460fe73df1e5efc21f3e5fb6aba8a940b240514760683476505fc34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 1cf0f0905a9daa39651732a0af7c287ebb7ef254eeb576294981d3b9d059d379
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 687b12be8db07558a00c2e947f4cd8765b440071dcf09054b37edc887a7446aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 ed41a496f0f4407bdb817730a48eac509e5ad3f6da48b409e7bf859f2c9104a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 0716a8b18445d7cdea7797932fd10bc5985d3a3736641b4a19b812c5df33e40f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-private-l1-1-0.dll
        • Size 74KB
        • SHA256 e7282970df1c54980ebc95ea64ca89c80152d4163e73bbda1cc4b52b755ad454
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 1634bcf13d80ac29117c5fe3012726c1ef45337b1b2f716df2119a80741df0d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 19880a17f6fb6c45802eb793c8e2b2afca4233f5e275bc7c7a9e28ab103ad753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 3bab4fce11348db6d05bf9bd2e09513f81ee28781ec49d8e12d1d9dc6878b5bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 721697c866ed1b74162743872c5e486a6c34e55080a9f6bf711bc78429426829
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 811568365aff9f0be2e794fdfbb4c91818161f74056e0af78790e763015717a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 485073dd4eebafc4a49e8029d3d5e2bdbf2b7397fa2a7f588ceb65c07ce07d44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\base_library.zip
        • Size 1.3MB
        • SHA256 2c3110143fa756ab67814d5a2e0d3de92f25de7287a0ac65297bcbd68f601822
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fb08vk.sys
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\fb08vk.sys
        • Size 25KB
        • SHA256 20265be2cef4efbea949205d80c185cab26bd2d4b76a2538af3813097c885c0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\pyexpat.pyd
        • Size 200KB
        • SHA256 947e85e3dd9a5889312d093a00601a4294023244f9a2c3d21623f3324f3ea535
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\python3.dll
        • Size 70KB
        • SHA256 9d8716135dacaccfb4016a1e05966f4cbe0cbd52feccad0173c93a28cb1aba87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\python313.dll
        • Size 5.8MB
        • SHA256 941e773568d36cc598ee837a489fd4c44474a6574075e1cf156100bd83f22379
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\select.pyd
        • Size 32KB
        • SHA256 4ad2692a4566175f5def440a45eee2382f72a70a46a60a63e0829a4a5e31c1ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23882\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/6052-1111-0x00007FFD5C0F0000-0x00007FFD5C119000-memory.dmp
        Download