Overview

overview

7

Static

static

3

Loader(1).exe

windows10-2004-x64

7

Loader(1).exe

windows11-21h2-x64

7

Resubmissions

18/05/2026, 22:52

260518-2tegwshw9p8

18/05/2026, 22:51

260518-2s8pcady5v7

18/05/2026, 22:49

260518-2rz1tady4t7

18/05/2026, 22:48

260518-2rkk5ady3z7

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/05/2026, 22:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Loader(1).exe
  • Size 8.5MB
  • Sample260518-2s8pcady5v
  • SHA256 1cd9b781b2d3459e36542b5b6786ae9bf7f2c44220aaff3f1cef7487cf554056
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 15 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Loader(1).exe
    "C:\Users\Admin\AppData\Local\Temp\Loader(1).exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4304
    • C:\Users\Admin\AppData\Local\Temp\Loader(1).exe
      "C:\Users\Admin\AppData\Local\Temp\Loader(1).exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:2016
      • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
        java -version
        3⤵
          PID:4860

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\VCRUNTIME140.dll
          • Size 117KB
          • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\VCRUNTIME140_1.dll
          • Size 48KB
          • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_bz2.pyd
          • Size 82KB
          • SHA256 fc3b481684b926350057e263622a2a5335b149a0498a8d65c4f37e39dd90b640
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_ctypes.pyd
          • Size 128KB
          • SHA256 f63c6c7e71c342084d8f1a108786ca6975a52cefef8be32cc2589e6e2fe060c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_decimal.pyd
          • Size 271KB
          • SHA256 b715d1c18e9a9c1531f21c02003b4c6726742d1a2441a1893bc3d79d7bb50e91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_hashlib.pyd
          • Size 62KB
          • SHA256 838d5c8b7c3212c8429baf612623abbbc20a9023eec41e34e5461b76a285b86c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_lzma.pyd
          • Size 154KB
          • SHA256 d080eabd015a3569813a220fd4ea74dff34ed2a8519a10473eb37e22b1118a06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_socket.pyd
          • Size 81KB
          • SHA256 35246b04c6c7001ca448554246445a845ce116814a29b18b617ea38752e4659b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_ssl.pyd
          • Size 177KB
          • SHA256 63ae2fefbfbbbc6ea39cde0a622579d46ff55134bc8c1380289a2976b61f603e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _wmi.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\_wmi.pyd
          • Size 37KB
          • SHA256 6435c679a3a3ff4f16708ebc43f7ca62456c110ac1ea94f617d8052c90c143c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-console-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-console-l1-1-0.dll
          • Size 12KB
          • SHA256 5f9d789e5231847a10431a29b89ebb2fe18ebe2f2a77c103211fc14c55657b25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-datetime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-datetime-l1-1-0.dll
          • Size 11KB
          • SHA256 c6064975ed1d3ff436e6b3cc4779ba9c1a61c5f670b24fcc5264371c73b97bce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-debug-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-debug-l1-1-0.dll
          • Size 11KB
          • SHA256 18d756a725b6d4ad34f6b2886b727a5895d7c65900a6c74b485331e8931fd9ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-errorhandling-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 11KB
          • SHA256 0e3f2cc438cfe4e8a7ccacb2ff2e2b8f4a8db4f2ef4633bb70fec72bb122d90a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-file-l1-1-0.dll
          • Size 15KB
          • SHA256 a332bba4c788c15461c7d702a308546d8eed41a1f997e0bb784719a935be3997
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-file-l1-2-0.dll
          • Size 11KB
          • SHA256 902ffc6e350772803ac35568364005c09be5c5e5d3f18038e46e9316aed217ef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l2-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-file-l2-1-0.dll
          • Size 11KB
          • SHA256 ae7f15d92e43bfb351363d149c89a0fad8453e2b2d08fdcb4d224c535a648fa1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-handle-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-handle-l1-1-0.dll
          • Size 11KB
          • SHA256 ca1b62f01363fbe818996592d8564a510f4bbd8e62694c24811633491ea20b3d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-heap-l1-1-0.dll
          • Size 12KB
          • SHA256 65e090598b9c3993ae6b13fc4c44946fa5a19dfb85bc66401a5dabfb5647ca9e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-interlocked-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 11KB
          • SHA256 fb0600267c2ea0e6436ebf2dc46edb3aee2696e5d2164500fac60d394e21d8fd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-libraryloader-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 12KB
          • SHA256 2eebdb5eae5cb88c329b8dacb80e782ba7c789038e8ba8123a47c3a571677776
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-localization-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-localization-l1-2-0.dll
          • Size 14KB
          • SHA256 2ee4d131e5492a9980efa47ae5a9e1aad3d5bccb062c26d28cb0c9559e973481
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-memory-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-memory-l1-1-0.dll
          • Size 12KB
          • SHA256 14d30d55506e8a44326d03abc46294abc1511409213196e0dd4ddefccf60bdee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-namedpipe-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 11KB
          • SHA256 17577789eab28202cd1bf06178b9911083849ab0351fe06b46a8c0f58d93c83a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processenvironment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 12KB
          • SHA256 1f1e0577ac1e1c757be525d8e36057a22388519964b1e2d79ffbd3e8fc0d00cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 13KB
          • SHA256 d80ecc44b211c19c6021b033085229c6f592c0c091c41eb9c177df833dc0a70f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 12KB
          • SHA256 0528474ae1b64b2ef0089b87d53d84a36b5792c381ea9459ceda87a29c5abb2a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-profile-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-profile-l1-1-0.dll
          • Size 11KB
          • SHA256 b0d8f37eac0997bb41952bd8dc12d25a3db6013c2146dbcab9ed84b6697eedbc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-rtlsupport-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 12KB
          • SHA256 fcede796e1271f2564f4a0ffdf13dc79ba5f5d2fc2093146dae334fd707fa146
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-string-l1-1-0.dll
          • Size 11KB
          • SHA256 23b8515d4d94bbabb77059a2536c2c1241ac261a58ad6192c79cceb1dca38f14
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-synch-l1-1-0.dll
          • Size 13KB
          • SHA256 fcc4728a8f0c8ec7d36aad45f24b5036a444afd75072137694ab87c76b8347cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-synch-l1-2-0.dll
          • Size 12KB
          • SHA256 a333e073bcf199b7872decd9ea911cbcf4f1b426a400c2ce5e07f0462fddd70a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-sysinfo-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 12KB
          • SHA256 b38c9e1608ae64b51a774e93752d549f72daa868f88e3f78631f5600543cb825
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-timezone-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-timezone-l1-1-0.dll
          • Size 12KB
          • SHA256 83ea1b0e636eac733c221a4fff4ab19371d8dacb8e80fa8295d86fe72bd2942c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-util-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-core-util-l1-1-0.dll
          • Size 11KB
          • SHA256 3ea53b2236eb6a920c473121980e071640d04a34af902525f64461e5003bc9ee
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-conio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-conio-l1-1-0.dll
          • Size 12KB
          • SHA256 6984e9aab9c4f6f4d1f1c9daef72d1e636a4505b39384c3a0c6401a3d0a3cebb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-convert-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-convert-l1-1-0.dll
          • Size 15KB
          • SHA256 672bea99f951983cabb697a3086705a121f668de5b98b3982c9bf25963bb5a41
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-environment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-environment-l1-1-0.dll
          • Size 12KB
          • SHA256 c7295e2521a696e4dc47ce9f00b6bf380bf9b85726ebe3475419e80cb94571ec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-filesystem-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 13KB
          • SHA256 b529d797f5c55158bdd80b1eff6024bcf80ced29f3a27272d1dcca1f998e0af6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-heap-l1-1-0.dll
          • Size 12KB
          • SHA256 15ce011ea8f0eaf4ec7dd67306f14b3d1ce4b2942674108e9880cb7f306eff60
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-locale-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-locale-l1-1-0.dll
          • Size 12KB
          • SHA256 e4b625697aabfc995a2085a7393963d9547f5492c6603f29383cb39b0d6e6a16
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-math-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-math-l1-1-0.dll
          • Size 20KB
          • SHA256 1114ad9f3a0a34b2c215814483ea0d1b70dab9e486b8fc75cf560ac4175d5a72
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-process-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-process-l1-1-0.dll
          • Size 12KB
          • SHA256 29b4b2feb379aa97fa713667b1c2ef1f60342eb29907777f0ddf3508be62b49e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-runtime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 16KB
          • SHA256 dd2658bcddb580c7913489a12d2e626061a92a948163bc6a9fdbea6966c5c8f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-stdio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 17KB
          • SHA256 44baab81179483a4fbc5371725c3c6d49dc38c5a5853fccd2090efc17178a887
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-string-l1-1-0.dll
          • Size 17KB
          • SHA256 1c0af055267a9b7492038f7936277e707c04d49570e7d2e54fa2d3787ece664f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-time-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-time-l1-1-0.dll
          • Size 14KB
          • SHA256 e16dbb880a89be46e71a7b498ff3758b188d46851db15709a7898f60449d2c21
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-utility-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\api-ms-win-crt-utility-l1-1-0.dll
          • Size 12KB
          • SHA256 bf9770586528c2dededb462cbe627bbfc11e33e87bf9cf8ccf0dcd8ab0eab22c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\base_library.zip
          • Size 1.3MB
          • SHA256 3a46bd1aaf2b8f14481a88e5795206b91c8eae1f361c2d290aec748f57a769c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\libcrypto-3.dll
          • Size 5.0MB
          • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-8.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\libssl-3.dll
          • Size 774KB
          • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python313.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\python313.dll
          • Size 5.8MB
          • SHA256 0c0a66505093b6a4bb3475f716bd3d9552095776f6a124709c13b3f9552c7d99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\select.pyd
          • Size 30KB
          • SHA256 78e5994c29d8851f28b5b12d59d742d876683aea58eceea1fb895b2036cdcdeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\ucrtbase.dll
          • Size 986KB
          • SHA256 6dada6c2ae69c792cfb3e90aac122810052d845ce875364bde885eef4f8fe9c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI43042\unicodedata.pyd
          • Size 693KB
          • SHA256 2693c7ee4fba55dc548f641c0cb94485d0e18596ffef16541bd43a5104c28b20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/4860-133-0x0000025EA60D0000-0x0000025EA6340000-memory.dmp
          Download

          memory/4860-132-0x0000025EA60B0000-0x0000025EA60B1000-memory.dmp
          Download

          memory/4860-122-0x0000025EA60D0000-0x0000025EA6340000-memory.dmp
          Download