Overview

overview

7

Static

static

3

6684bd32e9...d9.exe

windows10-2004-x64

7

6684bd32e9...d9.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    28/05/2026, 00:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9.exe
  • Size 8.0MB
  • Sample260528-a575sscs7k
  • SHA256 6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9.exe
    "C:\Users\Admin\AppData\Local\Temp\6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3624
    • C:\Users\Admin\AppData\Local\Temp\6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9.exe
      "C:\Users\Admin\AppData\Local\Temp\6684bd32e9d0cd1916d19c83277a989fe835975b4019616ae6e1a34b8ce10ad9.exe"
      2⤵
      • Loads dropped DLL
      PID:4440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\VCRUNTIME140.dll
        • Size 99KB
        • SHA256 0b040a314c19ff88f38fd9c89dca2d493113a6109adb8525733c3f6627da888f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_bz2.pyd
        • Size 84KB
        • SHA256 e5de23dbac7ece02566e79b3d1923a8eeae628925c7fb4b98a443cad94a06863
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_hashlib.pyd
        • Size 45KB
        • SHA256 2e98f91087f56dfdffbbdd951cd55cd7ea771cec93d59cadb86b964ed8708155
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_lzma.pyd
        • Size 158KB
        • SHA256 c4d00582dee45841747b07b91a3e46e55af79e6518ec9f0ce59b989c0acd2806
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_socket.pyd
        • Size 77KB
        • SHA256 ab13258c6da2c26c4dca7239ff4360ca9166ea8f53bb8cc08d2c7476cab7d61b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\_tkinter.pyd
        • Size 62KB
        • SHA256 7fdbb5a713a3de7413564a2ec15c8715f3ba203bfe2b944c9cda610155c511d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-console-l1-1-0.dll
        • Size 3KB
        • SHA256 a34b84d5cfcc7cf90ebcfa41aa750a2cf750622d0ad5e490469b339965d214fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-datetime-l1-1-0.dll
        • Size 3KB
        • SHA256 edfd3588c773d0981075cad245923718e53be04aaa57ca049f10ede4e081dea5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-debug-l1-1-0.dll
        • Size 3KB
        • SHA256 81641164dc5b8c264c4c71602895957e196708d20d86ec6c92906ac4908ea904
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 3KB
        • SHA256 5157ef26520183200cfb74e6a2503b01f9b8ed2943a093131f201015240fccef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-file-l1-1-0.dll
        • Size 5KB
        • SHA256 6666531821a2e1055a8b377d4f68035ceca288fd64577f661b008b06c616359c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 20560798f43a79ef390d9bc42aea3a59918c9440fb1404b420072b2048d77def
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 843a7cab04233f656081ddbeceeb58a7cdd2e2b1a04833f8acc4d361d2909abb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-handle-l1-1-0.dll
        • Size 3KB
        • SHA256 3e7142cd3b60c50c25e0e6a0e2e3a390711b41a57fe5e59ce2ec3fbec40a1d24
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-heap-l1-1-0.dll
        • Size 3KB
        • SHA256 d6df28691863427641802cb9f06e3e0fc5fd4a18f1a8b4d13414b9fc7c533c60
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 3KB
        • SHA256 115be99328702a187dc238fb0a7fb7a95740af0927d2a3ccfcb462ef7c09edec
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 3KB
        • SHA256 3f7f18f8ebbb716bb20bc183a0c9c05a9b01f9427e9e0df8d50803674743a939
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-localization-l1-2-0.dll
        • Size 13KB
        • SHA256 e4d3c421dfcf3a68ecba5ad4edd6bf55fcbed486a1417af9beaa9a1d62fb7e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-memory-l1-1-0.dll
        • Size 3KB
        • SHA256 e5fb7638b1e4c60e4957dbcecf05792221833e10124e79ba59c27a9b87c55332
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 3KB
        • SHA256 798676bc2449c3df26501289e2666d6d44d9fb715fda87dd2580b27d0d3c3791
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 3KB
        • SHA256 b7ac8920832d06be9cfc37c457f235b2f979b02b61653ebba3b35cb44cdf080d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 4KB
        • SHA256 306d8b0bc1838c808a50246f417b0e09df203d1ef2617a3a2678c11d97f12aa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 647442d40ea1bda158ceef56e3ec3d2e66fff1702de469e9c2ff162f1bff6161
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-profile-l1-1-0.dll
        • Size 3KB
        • SHA256 18e9c7dea96b85d0baa220045cbf6888b2a95f9f1254012a749f01af54121676
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 3KB
        • SHA256 0596f0cbe9d48367d6af81c2d189e5146c0cf30fffc29fd25c6ad80fefc7994f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-string-l1-1-0.dll
        • Size 3KB
        • SHA256 e28280f19fea3eea48b317a6c20296f4fc00ee4ab054b0354a650fb1e98ad91b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-synch-l1-1-0.dll
        • Size 4KB
        • SHA256 3fb445898763b7f93651f7303e8580a46e915000dd5fedb39eff7a9b1f49f4fb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 a35b6776ecd71b4e45983f50cbe9227f2083a12f47423af836431f672e165a0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 4KB
        • SHA256 25609070edb74404e24867c50aac2bd7be716bdb25c0939db689475c9a501f74
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 434a06fb89164aff7b18acaffb079ba074e4dae782ac005680395e052a28f30e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-core-util-l1-1-0.dll
        • Size 3KB
        • SHA256 a93da15cec329f6f87fa86d6eb2bdeaefde963b7e521243da72988b8899a34f8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 3828e4a7a4ede679807577df73db4561469a5757bad52f241508ca84b3cbcdc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 60c3428168002b09fdc246cf948c8341c3b2a1a0e1f70cedcdd6eab59b8e2d08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 63077ff3b5315688ed1ada38d05b15a713921e862a34ffc9260f30d3fd00cc7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 918411e05e727e6d42fe19b37c878d5ea461dc86f3bb8c21652c46d0088de8b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-heap-l1-1-0.dll
        • Size 11KB
        • SHA256 13c9432b4e54ba7699c062f5f20fcfa083e77059b7b6bc33db2cef5767d49227
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 de95bf6ecffb6aeb31bba8f62bb282f87e4b5b19659eca4b2435b2be2999c9c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 7a75c4c14da9f0e6d9c597321ee3a6531f903bbce33b83259eca611f62877c60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 1c8b9cfecb68e60c151ebb2a305291e70b7584faefd8c02df331b3713f11c5f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 4c93b20d7f2ccedc725f3f718f24e23d6a2148f0d73ea1d032c2eeba6b16afb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 12f0707c435d734fdec382b3475019b86e724902197b234a9788d9d6cb1e200c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 4e07911d2d2bf39b8b5ccabe1427f094b8feb3e0e5a5a691c4533d3bf5e58d56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 c3e1514c2e4d12ca10581dd4ac16ccc9ed055ea408b6c47a7eaaa32432652315
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 4f199489614cf260c71242ba85c948b7a7d021d4a2295298aeb937e0f3b65682
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\base_library.zip
        • Size 822KB
        • SHA256 2010a3f672fc00f48bc779b6e007aeb820ff2dcfac513262afddf93a62207775
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\python38.dll
        • Size 4.0MB
        • SHA256 169eeb1bdf99ed93ca26453d5ca49339e5ae092662cd94cde09fbb10046f83fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\select.pyd
        • Size 26KB
        • SHA256 7ba95624370216795ea4a087c326422cfcbccc42b5ada21f4d85c532c71afad7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl86t.dll
        • Size 1.6MB
        • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        auto.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl\auto.tcl
        • Size 20KB
        • SHA256 f385515658832feb75ee4dce5bd53f7f67f2629077b7d049b86a730a49bd0840
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        init.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl\init.tcl
        • Size 23KB
        • SHA256 bc492b19308bc011cfcd321f1e6e65e6239d4eeb620cc02f7e9bf89002511d4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tclIndex
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl\tclIndex
        • Size 5KB
        • SHA256 abf7d9d1e86de931096c21820bfa4fd70db1f55005d2db4aa674d86200867806
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tm.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tcl\tm.tcl
        • Size 11KB
        • SHA256 6437bd7040206d3f2db734fa482b6e79c68bcc950fba80c544c7f390ba158f9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tk86t.dll
        • Size 1.4MB
        • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\tk\tk.tcl
        • Size 22KB
        • SHA256 e1067a0668debb2d8e8ec3b7bc1aec3723627649832b20333f9369f28e4dfdbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\ucrtbase.dll
        • Size 971KB
        • SHA256 ce2621719f1358508c2c33bcc1380d78a737ca20cd18c0ac89f38e1be788d9a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36242\unicodedata.pyd
        • Size 1.0MB
        • SHA256 5d5e733397ef7c4946cf26c84b07312cb12eaf339374613d4381e694ef38169b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download