Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    31/05/2026, 12:59

General

  • Target
    08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328.exe
  • Size 8.5MB
  • Sample260531-p8a2ssgz31
  • SHA256 08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328.exe
    "C:\Users\Admin\AppData\Local\Temp\08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3520
    • C:\Users\Admin\AppData\Local\Temp\08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328.exe
      "C:\Users\Admin\AppData\Local\Temp\08c984a023ff84df6046c3acb20d10c2cf0100bbaeb3c0c81cd4b357f6613328.exe"
      2⤵
      • Loads dropped DLL
      PID:4584

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\VCRUNTIME140.dll
        • Size 99KB
        • SHA256 ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\VCRUNTIME140_1.dll
        • Size 43KB
        • SHA256 7b8f70dd3bdae110e61823d1ca6fd8955a5617119f5405cdd6b14cad3656dfc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_bz2.pyd
        • Size 84KB
        • SHA256 0563df6e938b836f817c49e0cf9828cc251b2092a84273152ea5a7c537c03beb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_hashlib.pyd
        • Size 45KB
        • SHA256 f9548e3b71764ac99efb988e4daac249e300eb629c58d2a341b753299180c679
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_lzma.pyd
        • Size 158KB
        • SHA256 5ddba137db772b61d4765c45b6156b2ee33a1771ddd52dd55b0ef592535785cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_socket.pyd
        • Size 77KB
        • SHA256 1db7b4f6ae31c4d35ef874eb328f735c96a2457677a3119e9544ee2a79bc1016
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\_tkinter.pyd
        • Size 62KB
        • SHA256 c7a385b97218dfafe81b5ecd249a5f7031c258a4f36a5c9eff7cf1e6203d148e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-console-l1-1-0.dll
        • Size 3KB
        • SHA256 9e93ed3b9887411e7f79ae861ee4a54dbd948f9b02f2f8ec443732a4659ffa2a
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-datetime-l1-1-0.dll
        • Size 3KB
        • SHA256 e22074c2358e912e93cd6d87e7a6cb7b9e62cfb9c7aa207b2e9b7a96a9701c0d
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-debug-l1-1-0.dll
        • Size 3KB
        • SHA256 5d5085d2e2e5f477ebe7697ef2001a3c37fd11a579f80c7ef93f9e873f867679
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 3KB
        • SHA256 43a771cd84a808cf3249698f22d29c95d6f8c87a8fe1c23c0c26e3b067cdd261
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-file-l1-1-0.dll
        • Size 5KB
        • SHA256 dca661047848055d020415f66298778095dcf655c521eddc08f245544214cb02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 77059cc0036311541ddb7f5182c0a3e81fd19f262de8306f84373e9b5b2854b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 380d5872d01f3bd52a5e9094f0f855db18306bd6215a02e134be970f0c0d9c77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-handle-l1-1-0.dll
        • Size 3KB
        • SHA256 051011db790763ceb7e4055e72df8ced533482b6c4eeee52a8d062c6ba375db1
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-heap-l1-1-0.dll
        • Size 3KB
        • SHA256 5439c5d620051d1350f777ef302f72047540277a9b83d88ca7b86af6693ad85a
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 3KB
        • SHA256 397d0a6e8a54e6cf25b211adbf23b9493cc5932e67c9d49eeeb500ccec6ca12c
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 3KB
        • SHA256 9733b08547a308f1522b95d07b684291efb6f4a90b661785fb24cb913d196a66
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-localization-l1-2-0.dll
        • Size 13KB
        • SHA256 5ae2d370948811935300bf4ded67c21aab8137e1365c419b2c27d11e91dc591f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-memory-l1-1-0.dll
        • Size 3KB
        • SHA256 52fefcc574ccaae8333592aa99727b3cc893b5ca4bcbf91ab891845b009aeff3
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 3KB
        • SHA256 d669e2f5b765265a1f325a551090e67d2ff7050789961c1fa6ae9562d4bf19e0
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 3KB
        • SHA256 860f7efcd0ea2b6b9eccbd299c016b4ee34013f6e3171f86b68f91542a16c3ee
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 4KB
        • SHA256 82ad683d6b49e78fc2cbd232484e461717ee9aa2c82c6c2cc3b6be696716034e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 a2c259e61c4ec1bb7611ac23830588747dde103363bdc671cf91a2433afce283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-profile-l1-1-0.dll
        • Size 3KB
        • SHA256 7068d7ad812fdf6741deb1eb1a64b19535b7257614a4e2f75b9c6c09f27a5abf
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 3KB
        • SHA256 3ff7a1b14103fef6b455d97f18d20fd3ec8c029da5a6b7aac7baf2988ff29c87
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-string-l1-1-0.dll
        • Size 3KB
        • SHA256 5e7a09f2e2a5560e234f67cf92e02ead4498e572ba717161d22f854c602747be
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-synch-l1-1-0.dll
        • Size 4KB
        • SHA256 dee566908bec4e4d92f4e453e1db7e824f20116a58a55c140959c95bb2ed4582
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 004b008c23339b6ee651823d4ed6449d1d2f92a38e4e462104a389df1d0c863f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 4KB
        • SHA256 b1e235bdce51f71b8280e2c5e7112fba7bd774b8654e4be6e65e84dbfe332b3f
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 ea0f6c20f03568641c01b4eddbd263a7122a2c61c88136085b3339cbce56c4c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-core-util-l1-1-0.dll
        • Size 3KB
        • SHA256 135a21ecca54156f231654904ad80eb1e91511f46b499d4ba266ef86bfc4918a
        • MD5 SHA1 SHA512 TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 f17517f46361328aebf52954dd1b9181df5a98cbdb2395701e3e73c4da7a7a84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 177e190aca8cc88c1ad1fa1f8848f9abcbbc24a5dfd046cfff06f72fff1a3566
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 fbd4bde83228c37de6043f36a98610fa4bb053355ead44a59d33a464ccdb9fac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 c31cfd12bd6c3da456bada513bb381d33ebb6980465ff0d586b24fe84719b50a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 1fc7051de0d107ac25badb41bc6062bd3a67aaf5553b6256052c65e51b548df5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 860b4ebcf673ee4c389e0ff8f502f540fd1ce8b2614a9c16b7f65cdf5c2ae0f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 7aaf66c87221eaac91c50ec1368f4accd32b63970f0e826f7ffffb2c4306664b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 733d3c3856868107e5708c92e747aac6df968a4d072328a8e8f36425d0e81770
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 b27cfa62dc7a0a115b1593d6f4b0c90ae494505dab3cceeacc013e2135d25969
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 e1bd3f4b19a0c7e574673b88b12d819d97d503350ed280ce2204afbdd7c9bc5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 7e69bbbc6ef5072b6c8e17af5f842f9959bc12335ef61cc6398d18ec8e03c41d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 50cf24a5b850ab992431f98dfe208704e7bc07427f74dee9873d0146900d56f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 33ca12e689203e92d20e1407169fce64f318ac327327e833061b4aad9bac9cab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\base_library.zip
        • Size 823KB
        • SHA256 16a71ed3bd78293d427fb410d92777cedc897fa6427f3c6750094989036eb44e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python38.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\python38.dll
        • Size 4.0MB
        • SHA256 13f7c38dc27777a507d4b7f0bd95d9b359925f6f5bf8d0465fe91e0976b610c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pywintypes38.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\pywin32_system32\pywintypes38.dll
        • Size 133KB
        • SHA256 73ec56cec52d7aefb93f68fa7f046981ea2379afff03488dcbb93d04de610981
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\select.pyd
        • Size 26KB
        • SHA256 940fb90fd78b5be4d72279dcf9c24a8b1fcf73999f39909980b12565a7921281
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\tcl86t.dll
        • Size 1.6MB
        • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\tk86t.dll
        • Size 1.4MB
        • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\ucrtbase.dll
        • Size 971KB
        • SHA256 24968e69daf49f58e812ada3e4cb24a66d6fb9ef14fc211538dd992b08ed1c3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\unicodedata.pyd
        • Size 1.0MB
        • SHA256 5578c3054f8846be86e686fb73b62b1f931d3ed1a7859b87925a96774371dba4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32api.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI35202\win32\win32api.pyd
        • Size 131KB
        • SHA256 1409577d92e0b0e2f8ae03a17a0e5566f1e6da652f09bc7a69314d3b7fa7e15f
        • MD5 SHA1 SHA512 SSDEEP TLSH