Overview

overview

10

Static

static

10

x4c944d1ae...45.exe

windows10-2004-x64

7

x4c944d1ae...45.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/07/2026, 02:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    x4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45.exe
  • Size 16.7MB
  • Sample260704-c8bbcaav5x
  • SHA256 4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • UPX packed file 36 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\x4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45.exe
    "C:\Users\Admin\AppData\Local\Temp\x4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4004
    • C:\Users\Admin\AppData\Local\Temp\x4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45.exe
      "C:\Users\Admin\AppData\Local\Temp\x4c944d1aed2c9678a4e29d363ba212d04b5bb086de8a67c665da91457b35fe45.exe"
      2⤵
      • Loads dropped DLL
      PID:1116

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_asyncio.pyd
        • Size 41KB
        • SHA256 e655dc68778a32d386fe260cb9254dc528260cd974d64829f58ce1c70404eef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_bz2.pyd
        • Size 51KB
        • SHA256 15bd85d56442650f45a8b83472115da5242d0a3abcab1c431e20fe2cefd56605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_ctypes.pyd
        • Size 67KB
        • SHA256 f17882828b53fb09d5cf848af1e3ba15c256add33b35f99ae7ebcc6e67869e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_decimal.pyd
        • Size 121KB
        • SHA256 a24ef12d363a38370bb10183660757aee400c3cbc57d1d9ed1c0c7939d9e2f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_elementtree.pyd
        • Size 63KB
        • SHA256 c1915f169cbb57578a109c48ed65c8b3580b3dc0c482defdf8f20bfda3689db8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_hashlib.pyd
        • Size 38KB
        • SHA256 3987f2a6d4a75e255819f69e4d249b7647cf34a46bb2bf798e60eb396bda2683
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_lzma.pyd
        • Size 88KB
        • SHA256 20cc3da0820a720f9de6536357374deca039c09700ded78aa0f3510abfd12998
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_multiprocessing.pyd
        • Size 29KB
        • SHA256 e5f557ca738af731731953e2082a7a1b35830f3b8a4d56859bf10bc6fc570874
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_overlapped.pyd
        • Size 36KB
        • SHA256 057a50db0167c2b7e97e81cb3903a66f97227a0ad62e6d91c82185662ccd735a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_queue.pyd
        • Size 28KB
        • SHA256 70d3395d2c780f1ed6beba595a308c3978007b291bf8b6b527c1fddf60312ff4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_socket.pyd
        • Size 46KB
        • SHA256 b1ec831d2eebccb3f6be31124c661928705828e1a98b9b2b555d1343cd10419a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _sqlite3.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_sqlite3.pyd
        • Size 61KB
        • SHA256 e85535e2833540add9024fa8d0f40eeeff315502075ba1bc97979971a667bf61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_ssl.pyd
        • Size 68KB
        • SHA256 7a2c66d592f75b066cee36dc531651498f94f979918f2aae752681debdc851f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_wmi.pyd
        • Size 30KB
        • SHA256 2d67ab330dc5fdb5ca3b5a1bad86e5b83d10c4dadc636023e59f7d37a0ccc54c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\_zstd.pyd
        • Size 176KB
        • SHA256 534fe0fa00183b3923c82906d5925d96099001651c9dade00dbd7967497c1df8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\base_library.zip
        • Size 1.3MB
        • SHA256 6b4379cfa9a5d430c3f059c237cee78f6788e4fa31f0d5d909e5fe72d0c786ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        crypto_clipper.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\crypto_clipper.json
        • Size 167B
        • SHA256 519fc78e5abcdba889647540ca681f4bcb75ab57624675fc60d60ab0e8e6b1c5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libcrypto-3.dll
        • Size 1.6MB
        • SHA256 d4661cf8f76783c4d418dc329748be2bbf6fb74bfa54f811c14a55310304a962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libffi-8.dll
        • Size 29KB
        • SHA256 e9d8eb01bb9b02ce3859ba4527938a71b4668f98897d46f29e94b27014036523
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libopus-0.x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libopus-0.x64.dll
        • Size 217KB
        • SHA256 fa8715dd0df84fdedbe4aa17763b2ab0db8941fa33421b6d42e25e59c4ae8732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\libssl-3.dll
        • Size 223KB
        • SHA256 4890be912d6fa49178775a73a8f0793a7be07b0cafd5703d5cf01227570818d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\pyexpat.pyd
        • Size 94KB
        • SHA256 5013953e5a91f7ec60aed7896967d41d00d513009c03918d5615bce422324e7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\python314.dll
        • Size 1.9MB
        • SHA256 f8bf604cf5599122009c3b7223f8895793ebf6bbe9848388019e7101ae386bc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\select.pyd
        • Size 28KB
        • SHA256 9229b354254595ab63c21d18e5e880a8cda0c898e1908d80d3318c43dc4418f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\sqlite3.dll
        • Size 663KB
        • SHA256 7f7f0e75e548f93d3f0b0abfdc98b5843af4680203c7e53e73e04158dfd70c9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI40042\unicodedata.pyd
        • Size 277KB
        • SHA256 c79c92224dd8a8faedbe3e58519ee8af5671863528c5d89bf8d277680369a5bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1116-87-0x00007FFDA0440000-0x00007FFDA0B49000-memory.dmp
        Download

        memory/1116-86-0x00007FFD9FF00000-0x00007FFDA0433000-memory.dmp
        Download

        memory/1116-84-0x00007FFDB2590000-0x00007FFDB25A4000-memory.dmp
        Download

        memory/1116-57-0x00007FFDAD0C0000-0x00007FFDAD0E9000-memory.dmp
        Download

        memory/1116-52-0x00007FFDA0440000-0x00007FFDA0B49000-memory.dmp
        Download

        memory/1116-82-0x00007FFDB7220000-0x00007FFDB722F000-memory.dmp
        Download

        memory/1116-88-0x00007FFDAD0C0000-0x00007FFDAD0E9000-memory.dmp
        Download

        memory/1116-93-0x00007FFD9FF00000-0x00007FFDA0433000-memory.dmp
        Download

        memory/1116-92-0x00007FFDB2590000-0x00007FFDB25A4000-memory.dmp
        Download

        memory/1116-91-0x00007FFDB7220000-0x00007FFDB722F000-memory.dmp
        Download

        memory/1116-90-0x00007FFDAD0C0000-0x00007FFDAD0E9000-memory.dmp
        Download

        memory/1116-89-0x00007FFDA0440000-0x00007FFDA0B49000-memory.dmp
        Download