Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/05/2026, 01:52

General

  • Target
    infostealer_20260522_022652_LaNKBAlC.exe
  • Size 9.1MB
  • Sample260522-cantsae15t
  • SHA256 8d6fee45993b47f4b6473ed2750775a78474eb3bf76b2da564508ef3ea227a2b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 8 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\infostealer_20260522_022652_LaNKBAlC.exe
    "C:\Users\Admin\AppData\Local\Temp\infostealer_20260522_022652_LaNKBAlC.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4004
    • C:\Users\Admin\AppData\Local\Temp\infostealer_20260522_022652_LaNKBAlC.exe
      "C:\Users\Admin\AppData\Local\Temp\infostealer_20260522_022652_LaNKBAlC.exe"
      2⤵
      • Loads dropped DLL
      PID:5152

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_bz2.pyd
        • Size 86KB
        • SHA256 ef5277eb670219274e7d1e92190ddf7f4bb94d4922ca1c1a12efadfd2c4c66f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_ctypes.pyd
        • Size 139KB
        • SHA256 fd4847b99cd504a66bdc4739f15181b562774e6736bb88775880b073276dede1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_decimal.pyd
        • Size 283KB
        • SHA256 1ee2247153ec6c6e5b3b49402f294b2b7325385ad489a5522e6fa9b406575e8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_hashlib.pyd
        • Size 67KB
        • SHA256 9bc6ffcd2ab4ac87c4035f18b432e888d0d4a36795c97bf3f28ddf32cc34e40f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_lzma.pyd
        • Size 157KB
        • SHA256 39e5bc3624a26c9f6ad2e2df412543b0bd697a1d75338b44fe99763358d6d8cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_socket.pyd
        • Size 85KB
        • SHA256 65caaa6f35c329d901ba3f3d9f7fc4d7443dcde89907dccbd6748786cc517476
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_ssl.pyd
        • Size 180KB
        • SHA256 12e31f50739e33b115c7e10febf1ccedeb5d9353cd539c608cc5dd164bee17a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _zstd.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_zstd.pyd
        • Size 491KB
        • SHA256 54e6acfbc1cb27c9afea0e133cadac68b89869ff1a14eb0c678d40eb9c655347
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 80f19089c1b796be03fa33f70a467e3bd5b52c6bef87694730afcffd1b429f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 7fb08d998e673286aac6d025e79ea009eb17dd3e27528b8fc6ab623d0c09a619
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 ca4ad5e57ce655defe02365eed940055f99b304499638be111a6b728f59fb280
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 2c6cc3c2662038d47d48c2118d5ba74c2c87e59c29555e4ae2f9ed522e5a5eaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 b8ffc0e89b60000ae9c6e265b8d40dd344ece2645d0f2e6883bded62ab973f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 37d143bf032d6ceaf1bb499a049fb785198ecbd16e6883e1c086d58b19183043
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 ff4bff113da55f38ba77078eda5bcae7e49fcf8048e1889e2c06f1088c66ce24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 776a09d8c95124917005bbb7c85e3d690297a840f54d2dece6362287f6664c80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 8f28bae8b9a9731dfee8d47f91b918a39689cea5aadf462f5b08306d75089d52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 75daf43fcfb6e93bf3ffd1e3c961aea830767b5f845b3894fac9f6ab4ab11375
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 cbafd87c930709cc08731afbf0b5a3021ab880656d8fda6f1d5b956b4cdc716b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 cdf19fb863f38c7a3856f4a05e357d796ba92dfd97b74bd332b79b01b22bced4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 de0be8e949b6f41f93b840cb84a9c19b32e15cc3f350f1a200e1149499e9c4d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 589319099d6f689fa744933e0ed9ca4b277febc8a2c5e19895cce0d10bfab8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 c730a34057a7974350ba9df7b466d475998a333d246e50b62ee55ecb1aa5accb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 29773a45101acfea466a0641564b456cbbc76f0e4a4de90703a137cc73a9c1c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 45ac46b7a13cbdb7f958832bc821b3b17b6b929ee88d97cf90dd16f0794a5a91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 d70ecc2d171a9c5c967e27f530a6039678cc2f846e83cf0dce5849bd9da127cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 9661c8b6a3189967ebde8021ae790bb8db244e2665157aff3971c2949f8d0f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 828cbac9d361c8db7be5fb237eb1e0f2cb80da204afdb5a45bfb1284ee213b05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 290350c6fc55c1b698161784b3404b6f16d42e64773c6e32f43cbd1e94bbc8d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 99db022e452472b4caedef4f43e0d8ed8f6875bdbdda6983493110391dbc336d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 0e803b856cdbc872dec2ea4e990edc38da7a1af0551f40a06e06dc70b12c022f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 01de86c5a79bf223189c7e36b20e4dc5086ce24ebf3067a41315a241736e2142
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 90612dff17dfbf032a424fb88b61bfc221532a84d63c89ebfc72ca9c50ea3aaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 c31647515a5a81b5de923a96e894db39002b9f148f7a0b6ac13febc44984e629
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 48fb940a431af292baeba5f02360dcb5743b8dda7c16c731f665028cf82104ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 066d533fbbcabeda23ed263dbcfbd3e25f210150989ca7dd03c1af20754ef656
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 eaf2aafab56c57c2dbc36b793cc76d6804ba1f557851f5ae492ec862470c5e20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 029fb190b72ef8ff3a66051fc6eca4d472b52765054245a76e7e2fa091a08eda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 8d9c3f90b02e300db44b79eb13d408dc8fd1e08fc11ac0f262257ebaf8e4b6c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 aec2e20f3127ae2ab46200cc6ee70bf85add68e251c00aa56017025aceac33c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 86bd0860407723f1f40d784101a0847821b9d5877f3957e355a843a2024e1867
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 c02d82776f7c555fb358842118318dbec326b3672078323e6273465b2d3a4283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 10d86055cc54a7e1339997d4a2d02c722281ecc1d4b8dd275978b4de07880250
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 7772b34d5d6d54bf6cd1501350440934ea1000f6898bbca77a61225b920f7e6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 24a592ffae9d0ba719ba09e315db14f3d2924fca089815d0d93cfb5c9ffbc290
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 e434c38c87a3f1790d8564a2a7e25c711d68abac3fb5d3a56a5c2ba17803bd84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 b5b435e664899bc7c69df6319b1af8eb9044ac35bfaf9955bd9bb12fdc2cb0aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 f0127f310f9f9f2cdfcd4e5959d2012f91a41d3082c110ea40b61deff37b7c8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\base_library.zip
        • Size 1.3MB
        • SHA256 dcb43761e66b669becf5ba89492477c585d358a562beb58095fe9942e190b7fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 8b27ebae75cc99f20075322446af36c9ffcb4e3b400a77d712ef43f007f47f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libssl-3.dll
        • Size 776KB
        • SHA256 56dd50fb903b860ace831d0cd6c6250cd57e8655867c3a0fa16eac2d4cc0ba0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\python314.dll
        • Size 6.5MB
        • SHA256 18310593c50ad109fc5c95db1fd5c92ecec9e1bfc66c976df9fc11dd62616d5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\select.pyd
        • Size 32KB
        • SHA256 8c3ee20776d8eb7c441f2006ed46b9ba932060c6b66df4c1e156dcf7738d56ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\ucrtbase.dll
        • Size 1.3MB
        • SHA256 f7d8e245f35e8c595ac1cbb712b66e6ce4a304653e80a3ac5037ff8784e5803f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\unicodedata.pyd
        • Size 740KB
        • SHA256 a7a2bfeed5d0480d8c458b3a61ee32c478ae10c694e8be61c3ba0e8cc2a6e1c6
        • MD5 SHA1 SHA512 SSDEEP TLSH