Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    94s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 03:18

General

  • Target
    MiaLogonGame.exe
  • Size 11.0MB
  • Sample260623-dtynrsav3t
  • SHA256 6ca4eb889b92c62cbce4610a6a61a44c29b9a27525bcbf991bbb3374c759969b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 34 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
    "C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
      "C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe"
      2⤵
      • Loads dropped DLL
      • Adds Run key to start application
      • Suspicious use of SetWindowsHookEx
      PID:4876
  • C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
    C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4764
    • C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
      C:\Users\Admin\AppData\Local\Temp\MiaLogonGame.exe
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LIBBZ2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\LIBBZ2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 da72e6677bd1bcd01c453c1998aaa19aeaf6659f4774cf6848409da8232a95b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_bz2.pyd
        • Size 35KB
        • SHA256 009f702018a305ebfe5be912f260760d1d7b874d3fa684a7f6af16589409e706
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_ctypes.pyd
        • Size 130KB
        • SHA256 7f4d823cf080eea14c3dca32b6854cb4dbd5ad8ba99359cbf31eb8002482e49f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_lzma.pyd
        • Size 47KB
        • SHA256 f2e7106c64b78cda69040094e6996863ea47098fbb1643f747261799db93c40b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_queue.pyd
        • Size 31KB
        • SHA256 3aff89ebb172aae3d8e7294c0c9683d1630378b9cff8cfc7ec7bc0603b562f6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_socket.pyd
        • Size 83KB
        • SHA256 8f7a489396d6c3585088e099b37d407ace0feace0c6a796b726cabfdeebddcd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        auto.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\auto.tcl
        • Size 20KB
        • SHA256 2302234f123a10fef315aa50893bd349bc52201fa12f6dc7bc09fdfc8e84bf85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\http1.0\pkgIndex.tcl
        • Size 735B
        • SHA256 420c4b3088c9dacd21bc348011cac61d7cb283b9bee78ae72eed764ab094651c
        • MD5 SHA1 SHA512 TLSH

        init.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\init.tcl
        • Size 24KB
        • SHA256 374e8e83d501dc0283d4b6cae60d96b46141048e5a57d1500dd379f966879f98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\opt0.4\pkgIndex.tcl
        • Size 608B
        • SHA256 bc4aff8132402e6244f497b3f849b6b30c328db8512a04e4c86c523a80f2fe68
        • MD5 SHA1 SHA512 TLSH

        package.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\package.tcl
        • Size 22KB
        • SHA256 9edf9783fe26c85040dc849b7aed8350becb25144b6b2ce6068f58cfdf574f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tclIndex

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\tclIndex
        • Size 5KB
        • SHA256 f832bc13238565d1427c463fdcacef0a93f4dc0352c0e3f35b573d9b11deaca5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tm.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tcl_data\tm.tcl
        • Size 11KB
        • SHA256 78e0d5fb77e51be0c99cdfdfef596c91b66ba1160c46c48a63266611bbcf26ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        button.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\button.tcl
        • Size 20KB
        • SHA256 2f013b643d62f08ddaaa1dea39ff80d6607569c9e1acc19406377b64d75ccf53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        entry.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\entry.tcl
        • Size 17KB
        • SHA256 92fb2fe5b22cc697f9396d3681cf3d31c03598d7d8d1858b4b7ab976e9c80a5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\icons.tcl
        • Size 10KB
        • SHA256 4cab80ace4104a4169c9bd1fdb24d697889b984b91a290b69a481912c38a9fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        listbox.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\listbox.tcl
        • Size 14KB
        • SHA256 fdfd4cf3102d83bad3556d0e0086b5f320f74484babf90421cf526fd8b9fbeb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menu.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\menu.tcl
        • Size 37KB
        • SHA256 39e93a2bd75b9156235f3271ea02fd7cac82b542ae56df733cd7bd62a2c4207e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        panedwindow.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\panedwindow.tcl
        • Size 5KB
        • SHA256 4adf738b17691489c71c4b9d9a64b12961ada8667b81856f7adbc61dffeadf29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkgIndex.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\pkgIndex.tcl
        • Size 376B
        • SHA256 1390f260ea7af5b0779549fa29615530ff9e3bc202806d2024ac644b1fac5dbc
        • MD5 SHA1 SHA512 TLSH

        scale.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\scale.tcl
        • Size 8KB
        • SHA256 423546933269faec913001f2bce30bbdbce3927dc9dd96fe74813e7ffb27cfb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scrlbar.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\scrlbar.tcl
        • Size 12KB
        • SHA256 189e7ee4b67861001c714a55880db34acf7d626a816e18b04b232af9e6e33e81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spinbox.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\spinbox.tcl
        • Size 15KB
        • SHA256 a804c83029e04e6bd34d335260f388890d7657deb544173858bd05018d73ab01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        text.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\text.tcl
        • Size 33KB
        • SHA256 fd12bca3c7dcedf3fc6640902af1c9f48bc5df27c9153edaec15413f1581e4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\tk.tcl
        • Size 23KB
        • SHA256 779ce7099675d1fcdaa8a53df58cf5b2da6d5f03cdbf7a8c318860bd01a6e46f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        button.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\button.tcl
        • Size 2KB
        • SHA256 684ed40a9609ca275ce6f3e547fbf2980e3c040faddaf0fd39b7cbd7d5987366
        • MD5 SHA1 SHA512 TLSH

        cursors.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\cursors.tcl
        • Size 4KB
        • SHA256 c1db93eaf482bee1bf57cb423f28a8c6770ced9b37ebbb8c9fc86d61215fe8e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fonts.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\fonts.tcl
        • Size 5KB
        • SHA256 1f2d2965b2c72ae953c0829a227577ada8959d24502638b3186aa840b678cc3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        menubutton.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\menubutton.tcl
        • Size 6KB
        • SHA256 a16dfb1eaf77b05a0ef92b4cc7d00f559fb6cf0b2f735c3afac50303c524a081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scale.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\scale.tcl
        • Size 2KB
        • SHA256 6161c40bf5d6cfe9c836aab2370efc951bc3e14bc17dd9477455b86b5252d696
        • MD5 SHA1 SHA512 TLSH

        scrollbar.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\scrollbar.tcl
        • Size 3KB
        • SHA256 ee5261fe0fc03e54f417abb032e5289185f8698d60ae74db69032fedeb2d12a9
        • MD5 SHA1 SHA512 TLSH

        ttk.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\ttk.tcl
        • Size 4KB
        • SHA256 2d5892078ea331e7f967f46ab510f13e890c9ee185d597d9fb3bc4c29e400ecf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        utils.tcl

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tk_data\ttk\utils.tcl
        • Size 8KB
        • SHA256 d17c13d2d163a1bff6987f751220cf3dcf0d466cc6c52a8e2cc6219c21629e14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_tkinter.pyd
        • Size 67KB
        • SHA256 aa7c0d576a17da46cd76fbddd6e5311cefa036bb7f3d7245884f49895f202c28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _wmi.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\_wmi.pyd
        • Size 35KB
        • SHA256 b210f7118d00b8fe267fa492e4e836b5670bc84df3109b376776dd9a8594642b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\base_library.zip
        • Size 1.3MB
        • SHA256 b4cf97662297b273d326417ceb51b4d8b2ae9c53e30d3f6394c03b7f5ea0bda6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffi.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\ffi.dll
        • Size 39KB
        • SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblzma.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\liblzma.dll
        • Size 193KB
        • SHA256 b8cf9fe6d3eaaff6fcebce37947660297762f2f4dde503f7f56ce6475c439abd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\python312.dll
        • Size 7.1MB
        • SHA256 3d34b3e3c8b0e4f085bed2bcce9224191a7ee8ba24a6633659281191b7bd97df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\select.pyd
        • Size 29KB
        • SHA256 4395d4608e4cea8a16d2e9c73a429a4e9acf3aaa4e4fcc6c375cd79fca4450b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\tcl86t.dll
        • Size 1.8MB
        • SHA256 aaa0445afe3ab50b473e546b4ab3df4557c4d2a24a4b497bba84ac1cf0934c63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msgcat-1.6.1.tm

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\tcl8\8.5\msgcat-1.6.1.tm
        • Size 33KB
        • SHA256 c29589596069ef698f1394262d019f5708a05a5211d8feceaa4c3ab74f5d7d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\tk86t.dll
        • Size 1.5MB
        • SHA256 a834c088405f485d50e4c0f03421941efdea728dd54ffeee5c06d7d367c0a632
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\ucrtbase.dll
        • Size 1.1MB
        • SHA256 91d027417ff2301b7135e864a5df6693488f8412ff87040f4897e0e03bc2577b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI23122\zlib.dll
        • Size 97KB
        • SHA256 8dbfd6ef7374a831158bddccb79e3d5665e9625c81af557f15b4150b7877f687
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4876-2036-0x0000011FA0110000-0x0000011FA0111000-memory.dmp