Overview

overview

7

Static

static

3

IRUS.idiotproof.exe

windows10-2004-x64

7

IRUS.idiotproof.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 10:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IRUS.idiotproof.exe
  • Size 66.8MB
  • Sample260705-mmbp4afw2l
  • SHA256 db4b8c14162d4ec6e8ebbdfc0e024358cb5726c236953a875ff868154035de33
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 27 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\IRUS.idiotproof.exe
    "C:\Users\Admin\AppData\Local\Temp\IRUS.idiotproof.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5880
    • C:\Users\Admin\AppData\Local\Temp\IRUS.idiotproof.exe
      "C:\Users\Admin\AppData\Local\Temp\IRUS.idiotproof.exe"
      2⤵
      • Loads dropped DLL
      PID:3648

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\PIL\_imaging.cp313-win_amd64.pyd
        • Size 2.4MB
        • SHA256 010808cd1eb564aeaee8ba65ab2e20ae07f9bd9cbab8dba1d88931bc6842de0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_bz2.pyd
        • Size 82KB
        • SHA256 fc3b481684b926350057e263622a2a5335b149a0498a8d65c4f37e39dd90b640
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_ctypes.pyd
        • Size 128KB
        • SHA256 f63c6c7e71c342084d8f1a108786ca6975a52cefef8be32cc2589e6e2fe060c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_lzma.pyd
        • Size 154KB
        • SHA256 d080eabd015a3569813a220fd4ea74dff34ed2a8519a10473eb37e22b1118a06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_queue.pyd
        • Size 32KB
        • SHA256 b9cf502dadcb124f693bf69ecd7077971e37174104dbda563022d74961a67e1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_socket.pyd
        • Size 81KB
        • SHA256 35246b04c6c7001ca448554246445a845ce116814a29b18b617ea38752e4659b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_tkinter.pyd
        • Size 64KB
        • SHA256 a6851d7c25a1216d2c8fa5c1d2e9eca3d0392d60e3b7441ad9f66c23ffdd2f08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\_wmi.pyd
        • Size 37KB
        • SHA256 6435c679a3a3ff4f16708ebc43f7ca62456c110ac1ea94f617d8052c90c143c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\base_library.zip
        • Size 1.3MB
        • SHA256 88fd710d7061467197d25dc26e5e2060f75a1b2116258d84dcf31fdd474bb04a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        blue.json
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\customtkinter\assets\themes\blue.json
        • Size 4KB
        • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\__init__.py
        • Size 6KB
        • SHA256 957a91bfd98ffb07a10cd789b7c5c46806568476b61e34c7ad56a00092b981a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config-3.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\config-3.py
        • Size 748B
        • SHA256 de28c7b5213cca148f09469916584611b3d66c1c8c432880259d6a3a92380213
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        config.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\config.py
        • Size 123B
        • SHA256 6c6367abce55995ae4a8d3c199420ec53afab287cb17dfc2f430378af75dd301
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\data\__init__.py
        • Size 73B
        • SHA256 f4ce16721ed7f623a4dcc443ba600d1856db610cb2c3d53c13a8ca028cc68f6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\gapi\__init__.py
        • Size 10KB
        • SHA256 74f5fd2a142a31b0a4707b70c0be3637f0fbf8a940eec4372e7ba87e5a5cedb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        load_config_py3.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\load_config_py3.py
        • Size 271B
        • SHA256 ff583a5874be8f848e73c2f61b3a71680995926479c9bc436e6565c5cce7ca07
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\mat_wrapper\__init__.py
        • Size 1KB
        • SHA256 c44707ea1c76f35518ae572b6c1989d76c2ada7e850432e41805dfe112d4e306
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        version.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\cv2\version.py
        • Size 97B
        • SHA256 9e9d5382b1f743f06d6e12ace305d40786432ff52eefa12cf171cf97154bbb4d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
        • Size 19.4MB
        • SHA256 6547e9fb966e9773caee2755e91a8bf4d6f3a2f0eebf9646b0158f8675ea4ab5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140-263139962577ecda4cd9469ca360a746.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
        • Size 561KB
        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiarray_umath.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\numpy\_core\_multiarray_umath.cp313-win_amd64.pyd
        • Size 4.0MB
        • SHA256 64b08945fb969e50f56fa2e993f018e3eeaa14c077f24efbf3b4cb0bb0606a6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _umath_linalg.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\numpy\linalg\_umath_linalg.cp313-win_amd64.pyd
        • Size 105KB
        • SHA256 c6924a5773009521015502ae9f38b7b98ca3d278a3eea1568a01dea9b6464b28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\python3.DLL
        • Size 68KB
        • SHA256 a5c6a329698490a035133433928d04368ce6285bb91a9d074fc285de4c9a32a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\python313.dll
        • Size 5.8MB
        • SHA256 0c0a66505093b6a4bb3475f716bd3d9552095776f6a124709c13b3f9552c7d99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\pywin32_system32\pywintypes313.dll
        • Size 132KB
        • SHA256 9bb6dece38380abc747dce9ba8b0834a2bec469bc942dbcc8658e30ebdfb59a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\select.pyd
        • Size 30KB
        • SHA256 78e5994c29d8851f28b5b12d59d742d876683aea58eceea1fb895b2036cdcdeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\tcl86t.dll
        • Size 1.7MB
        • SHA256 c861f39ad0f4fc7f3875850925f61442bff2bc1839bbbb3584a63bc4d6e5cea6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\tk86t.dll
        • Size 1.5MB
        • SHA256 6425bf57abcc1dfbbe8662b1956883ae0c5ab8c2d9314e19692b3d86babc242c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\win32\win32api.pyd
        • Size 132KB
        • SHA256 b80722e54741563e72e264ca33e1900ee49c927c475e54ef8f94c3eac9032465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32gui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\win32\win32gui.pyd
        • Size 218KB
        • SHA256 6c545bd22720a7088c1353e5e554ded4db5db4c1b164689e7d42acf312561aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI58802\zlib1.dll
        • Size 142KB
        • SHA256 8c2ed3e1a90c9b0e3ef844be20e1af791ae8a1b665d4731162404f0eee1697dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3648-1118-0x00007FF831900000-0x00007FF831929000-memory.dmp
        Download

        memory/3648-1119-0x00007FF81B3A0000-0x00007FF81C71B000-memory.dmp
        Download