Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 11:17

General

  • Target
    test.exe
  • Size 106.0MB
  • Sample260707-nd46qagx3s
  • SHA256 72fa6f6208e269b17e20979d5609d6463abbc702a8a0baa56991cde0b3ae1bb8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\test.exe
    "C:\Users\Admin\AppData\Local\Temp\test.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3076
    • C:\Users\Admin\AppData\Local\Temp\test.exe
      "C:\Users\Admin\AppData\Local\Temp\test.exe"
      2⤵
      • Loads dropped DLL
      PID:2972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _webp.pyi

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\PIL\_webp.pyi
        • Size 66B
        • SHA256 cc3f2f0283c2f1a1085637dc90bb45b24456e6c6a255e977fac254036a476867
        • MD5 SHA1 SHA512 TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\base_library.zip
        • Size 1.3MB
        • SHA256 acc984e255e0a49d80dce734a8c4df191bbfa0fe44d7cff284b5f8bf0219929f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __init__.pyi

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\cv2\gapi\ot\cpu\__init__.pyi
        • Size 102B
        • SHA256 4e3427bacd8785129b664b26456c7c0a3119a8ba17b8a5c82c1177be2c69fd72
        • MD5 SHA1 SHA512 TLSH

        INSTALLER

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\pycryptodome-3.23.0.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\python314.dll
        • Size 6.5MB
        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
        • MD5 SHA1 SHA512 SSDEEP TLSH