Overview

overview

7

Static

static

3

v1.0.exe

windows10-2004-x64

7

v1.0.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    21/06/2026, 08:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    v1.0.exe
  • Size 35.9MB
  • Sample260621-key5bact4j
  • SHA256 da2e5a8d5e9137f76d61df42d4dfede28f00c2f0ff071c32be14f5f27c98c83a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\v1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\v1.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:716
    • C:\Users\Admin\AppData\Local\Temp\v1.0.exe
      "C:\Users\Admin\AppData\Local\Temp\v1.0.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:4436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\VCRUNTIME140.dll
        • Size 96KB
        • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\VCRUNTIME140_1.dll
        • Size 37KB
        • SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_bz2.pyd
        • Size 81KB
        • SHA256 5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_ctypes.pyd
        • Size 120KB
        • SHA256 e662d2b35bb48c5f3432bde79c0d20313238af800968ba0faa6ea7e7e5ef4535
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_decimal.pyd
        • Size 245KB
        • SHA256 d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_hashlib.pyd
        • Size 62KB
        • SHA256 39bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_lzma.pyd
        • Size 154KB
        • SHA256 613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\_queue.pyd
        • Size 30KB
        • SHA256 2f71046891ba279b00b70eb031fe90b379dbe84559cf49ce5d1297ea6bf47a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        a.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\a.jpg
        • Size 11KB
        • SHA256 e08970eeb9840280c41af664591073894f950818e9ccc3be64efb27fa7e924e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 8d467e0f39fac26b03ef5bb031e742f811e86cff544a7dfb16a1bec7df5e52fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 c5ddad487f2ea9dfa5f88eefbaf59672f6415ec6e21d7f89c0b98a3e6fa385c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 01f1f800090f9dd6dcfbe00358cd5241432bff22799e01cd82a1dd70b6c5c854
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 ef1bd8bfcc9cd818232cd987eeec3331f5a3e6b2d3dc22ba3b01332240dcec8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 1ec3bdf1ccaca79165a9669126a632ad4b37b29f8c2c89c63e6391c36deeddbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 064c7b10c031d09a2b53bad9b77fd12ab20681531aa228f4bc84200f0391c75c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 1f904737b907864e16a74426f0af57dabf5cb105ae68bae5971afc3f3959cb2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 d951b189217e3fa7ca4f6ddb12609dc12c953fc577b758d699b20d510c6049e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 987743a0a64900d8a381794a25ccfe1baca3cfae2148c5b91ac94265b28f66a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 919b65f577b2b3dffca06575e4bfc2b069a9d2a94919894d5633a98eafb218e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 468d28546ea511197607241abd8582304b82c66114a92089d73a1d6e55e910a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 8fe02fbdd7812a562833e33c07caa547febc5e838c8e94b5212bb0e1ed12c0b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 d4c445b9f79f6544245c16353bab418dd26f86b5db0a2c2d16d0cee16e7565ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 cfdaacd5d61e08dc076e8d821da678e69f25d9d0ec93b7e4029946463f2a4702
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 b877c76a699559a5dbf598f8ea2122263219afefa3ce2c51507c7bdd0b9941da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 ea7d9036361659432cdc31fa4a793965c5b85569829c78782f603b5f50228c88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 a6bf1902df0a767261a93cb47816ff0a120f1c41b5687d62b2d2ac9fd4027311
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-profile-l1-1-0.dll
        • Size 11KB
        • SHA256 2bc09159bcb3dc4a0c64935fff73b499951fcf4c527e76805b419e6b7ece4cd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 900cbb334b61d28603d3575794ded52ede19daba378e4a09635d43bffd5ab213
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 5803a20e959c0d99b3b0394d9ac6178e6b674cba87ffe3ac871ec0e5e4e91665
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-synch-l1-1-0.dll
        • Size 13KB
        • SHA256 290a47ef7d13a1a9854a56ba17c612221c9720be7aaa4ff6a0d6608895e133a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 dab95e1c361e81594538643723fa7bf45ab9218f0a5eb89ce216904f93d28764
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 b56e440ad94caffa74634a179192203ea4612a41c05edb1f15ee6e47804904ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 0eca1f24b7803c1f7e8d61486eaf9b84479a5ac6288046e1a3cd0059ccd4b69b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 858bc04989bf73c88ebccd33ec15f4c861d87c4d539f89ab426f3ccc8f79c384
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 660092369a915ddab820be4fc67f671672cb8941330b90bdc40122bb06dc5acb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 47c9551c56d16d5b3a134d3a8809778403a388dc70ce57b81b125a1a49db378c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 f7624c8b51ca7367d33819545ae84a81c90723db399c408f617ca5b039877328
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 f776171ecd8e8bcc5fa16cce4e5cd5f8ca970179de6a668e4a726120698b01d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 448ecedf5a1755058825689657ba3fc23569f1e24c7b73fdd9b25e7175c32123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 28411bd94eb56c4933243a5dd7c3d4cbb81d6bd8bed5e362881001dc5dbd5592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 5252985c9ee03cd63db71b8de79c0f986caac3ff131db64ca851b1e5a811796b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 6e5e49d5ae606bf0d4027d64e38b2fa9931b74a5b390a6fef4a1ace446596906
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 d051a2b9b189a4a780b15e013aadc9d76ea433c03288ace2bd332cc63959d2fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 8c5afcc100e86f7cbdb34822adbaf21f7589b2e0fb388b59f062bbbaea525f58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 4a97e263333ac016cef2b28dba4ad19ef08bef8ae8b2cc827bcb0abcb4e77d71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 b14e187b81fd046b4c4711c5409a46fc01a0a86b0ce517c5a50fb10329f2e59b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 46ca9f366b09cd8e97e869717cb851e3792ce12373e88e35a378a81d79036489
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\base_library.zip
        • Size 1.4MB
        • SHA256 f21958491376874c94c83542a539c9daa5bb53940f053382d47bc44974cfcee3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\libffi-8.dll
        • Size 34KB
        • SHA256 128a583e821e52b595eb4b3dda17697d3ca456ee72945f7ecce48ededad0e93c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\python3.DLL
        • Size 64KB
        • SHA256 4055d1b9e553b78c244143ab6b48151604003b39a9bf54879dee9175455c1281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\python311.dll
        • Size 5.5MB
        • SHA256 a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\select.pyd
        • Size 28KB
        • SHA256 0046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\ucrtbase.dll
        • Size 986KB
        • SHA256 ace7a1a8dc840c1d082e955f48b63fa29cfa30f7920b7df8d5dad05280d433a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7162\unicodedata.pyd
        • Size 1.1MB
        • SHA256 ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4436-234-0x00007FFD446A0000-0x00007FFD44903000-memory.dmp
        Download

        memory/4436-235-0x00007FFD38260000-0x00007FFD3874C000-memory.dmp
        Download

        memory/4436-236-0x00007FFD37D10000-0x00007FFD38251000-memory.dmp
        Download

        memory/4436-238-0x0000017C3F770000-0x0000017C3F780000-memory.dmp
        Download

        memory/4436-237-0x00007FFD394C0000-0x00007FFD39725000-memory.dmp
        Download