Analysis
- user interaction
yes - max time kernel
150s - max time network
120s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 11:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
test.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
General
- Target test.exe
- Size 106.0MB
- Sample260707-nd46qagx3s
- SHA256 72fa6f6208e269b17e20979d5609d6463abbc702a8a0baa56991cde0b3ae1bb8
- MD5 2989a6ce11908396d5a178ce3c6f31e7
- SHA1 b67411b633bd0d499647c0e1790d480f20e7539c
- SHA512 30fc8e1c9c258c79fd035720adc9e45a546b62f6105e30a4296056b97f21f2381b73937eb3ed76d62c910eda114d345d9af4757f5a992deb44c100100e2dd30d
- SSDEEP 1572864:NDq/34ftGXJVrvo2pUg9NoX0RnydQ+vWlM9ojCrD4WWJv0aSc/JUNngPhgOThnKK:kIf6v7ig9NXydelKb5aSc/iFgdFnqPu
- TLSH T1963833916E01E59BE4D9823657F88D52E87B689A778392F703F0017B2C4F7C8087DA76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 2972 test.exe 2972 test.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3076 wrote to memory of 2972 3076 test.exe 88
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\PIL\_webp.pyi
- Size 66B
- SHA256 cc3f2f0283c2f1a1085637dc90bb45b24456e6c6a255e977fac254036a476867
- MD5 e82ce1a659755bafda7bc3e0e2d1b814
- SHA1 7f0b9ccdf21682246966759e4006b013c26503dc
- SHA512 a63ea8c91c8843f16bd7163ce1c570e8708ec5bbda66381cacdd53a53d8e9bf2e4cb475aa957c3c603ee9d9ce7427b137e5d5a188d1953a6ed0b496d23a3a034
- TLSH T165A00243583B74EC8BBD4D755D3F05B1552514845B115921A4C0A219B3CF478643536E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\base_library.zip
- Size 1.3MB
- SHA256 acc984e255e0a49d80dce734a8c4df191bbfa0fe44d7cff284b5f8bf0219929f
- MD5 fd2834beb515adce934bdf884c2ccb40
- SHA1 23e87b1d8ef737c8d0922fac175f771694dc07ae
- SHA512 d3dd025178ed067ca15efa64e0284bf96e3e8b44d144aff56660f2e84b31a44e440d4ed349760e86d8772047e2d1ca7199ad1c4d168fa4a57b6792ea77b88623
- SSDEEP 24576:JlbTQZcdCL6QeOdP2m2dfquUFi6YWABRpzxH:j5dL/yuUF/YHRf
- TLSH T134552BA1B9917967FEC9F37A35B75A0CA715C0109B10D303B4A88DAC6FDF260AE558CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\cv2\gapi\ot\cpu\__init__.pyi
- Size 102B
- SHA256 4e3427bacd8785129b664b26456c7c0a3119a8ba17b8a5c82c1177be2c69fd72
- MD5 76a52052a88b73da0775db706df73883
- SHA1 fa60a624e7211cfa6a0a6fb01a11fde7d19b3b6b
- SHA512 7ecce1d9cdd097826e8a7c86d7a72ac65ed4910e6d9c88ccbf01fdeb4c38946260761050d3cfe9cc865e815e06ca348bcfc831a0ac221e434205d77f27936a27
- TLSH T1CEB0120B61D31511B5F311354017CB34A57C58E0691830103919433C1C13823901110C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\pycryptodome-3.23.0.dist-info\INSTALLER
- Size 4B
- SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
- MD5 365c9bfeb7d89244f2ce01c1de44cb85
- SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
- SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\_MEI30762\python314.dll
- Size 6.5MB
- SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
- MD5 006b0746b5abaf438d1bc753261c6d2c
- SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
- SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
- SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
- TLSH T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
- MD5 SHA1 SHA512 SSDEEP TLSH