ca4aebc998bb8328f190e0fc19f6aa2ad5b9bbcb42a4ea29a59e89ca037910e5

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 15:57

Target
launcher.exe
Size 6.9MB
Sample260626-tefgmsds6p
SHA256 ca4aebc998bb8328f190e0fc19f6aa2ad5b9bbcb42a4ea29a59e89ca037910e5
MD5 9bbc9abc1c093355545f8cb439a9b336
SHA1 f8d05dc03cc02232a633709501a631d096214161
SHA512 4efab205a966ab854cb6050687c6bdda0a3f880c57041c83193e06b32e578ac609dbab76fa1e7244d0658fce62abecc2e05da1ee46f6aeb9bdfda7f9d4dd04c1
SSDEEP 98304:KmzYmMZCljHqAa1jNLcFujb8Np4G3j+HIKcts2I6cHt6yx19oq7OrGa+urxkXP2S:pYfWzqN1CEbvc+Hc/IDtT9OiUJttmHh
TLSH
T145763308A39415F6F6F3D1798A73D429D272701707B08ADF53B5529A1E23BF029BEB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4052 wrote to memory of 4488	4052	launcher.exe	89

C:\Users\Admin\AppData\Local\Temp\launcher.exe
"C:\Users\Admin\AppData\Local\Temp\launcher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4052
- C:\Users\Admin\AppData\Local\Temp\launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\launcher.exe"
  2⤵
  - Loads dropped DLL
  PID:4488

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI40522\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI40522\_bz2.pyd
Size 84KB
SHA256 1bf985b54f529a3cbb3e52532791cc4d4c64009142d37b54eb3521adec203d5c
MD5 0a18953eb45266704171cbe54c6dd261
SHA1 15f7edd8d0ac559d912d64503fd68f1a8d4c58f7
SHA512 e5f1bef48695b4fae556113a2ccc6ed1e1cf49fa319b94f052705e809eba2543db16fcf955ac9c01de4d81746c90abc85d717004b6b3b1071b27696c6838068b
SSDEEP 1536:QVF5z780RCmmgKRF2OXvLJnmEmdBv8ZEs8iEEx0ZIILVfy7NsR9QfIbHbvTcE:yF5zIjmNAAOfLKdB0ZXjxx0ZIILVdTl
TLSH
T194838E47B76461F6F9AF81B496910353F730BE960710A3AFB24482953F13B91EE6831A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI40522\_lzma.pyd
Size 155KB
SHA256 51815b6474d4216c6a2aeaffdae5d2ff4acb7a0236254f2cfe43247022f3d781
MD5 8aab96a90295cac7b047fc706a118823
SHA1 e9ce0ae765d65ba9c4d7d3f9cbf61622f5633ca2
SHA512 2a10aeb5783bd1d99dea0200f577bdeb95f36dc328063fb8d3a54fb70e7ac74251f03d424f2ba4fcdd5359f92d6b9106a124403bde6dd154bebfc5c7b7fbf6f7
SSDEEP 3072:mK1fxbqH1ZTffdFj+JnTqznfB9mNohPRHdZII01dkTB:m6Jbq7vsnTc5YOXHdwIB
TLSH
T1DCF34B86B794F0E5F3728C38D6624F57E6F5791A0320929E01CC936D2B1FB659A2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI40522\base_library.zip
Size 1.3MB
SHA256 25ccf871946c84888aa8ab710ad733d70b817a3702cef6637953eb9785846633
MD5 f8d3086e18f3eba9f0af28c8d52ef7da
SHA1 62a6a50ce4396462dfb7c99333f4cd6e51d6ea23
SHA512 7024cc396c5638bd84d4c6fcbc2f64859d4bb04d08fd3d83c625501d9f8d3c7695a4778a9b6c082466c53cdd2ebfa3f7c28639962da2d81aa5e937b98407f71f
SSDEEP 12288:3uIva80201jwCVRDVoioSYB4tYzGN8Txs5xW7Wpawt0iM3jEAHTvdjdTji2cPPdU:3l5SuTxz7Wpaz3j7dZj5cPPdxhYJz
TLSH
T163551992B9527953FF64F37B80B7484CF31E86A2EF00C207355E42661EFE6B09E59588
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python313.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI40522\python313.dll
Size 5.8MB
SHA256 6964e590037c41d631fd1215f05af154f7fa68105993c6f573a20689b473f1ac
MD5 5a7cbaa796ee41e35b5e6bdf4e024e48
SHA1 868b787184e90a277f065d7d0b830772bdd6e52f
SHA512 69dded87aee32562f57c50c5b1a3f99c7f64089226d911751cae314bc451bbd2d3e4a9c9410a532f4fefffcc4687d7c26e609d5aea13b077aefd1070151d5f6f
SSDEEP 98304:aE6YlbgK3Lv6PVN1Wgz52Wv3HDMiE9o1w:aE6M3j6PV/Git1w
TLSH
T1FB568C16729E51ACC97B8078CA13864BFBB27C053F60434B61E6BB5E2F73362466E705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download