970e32daa1ce3a2bb8deb7dc1779df58391031c12ee5ddcfcf9b5908fa51c1c6

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 12:11

Target
Converter-tool/convert_raw.exe
Size 8.0MB
Sample260710-pcmeysa19k
SHA256 970e32daa1ce3a2bb8deb7dc1779df58391031c12ee5ddcfcf9b5908fa51c1c6
MD5 09699886fef6cd2fdf284b8023b12550
SHA1 39ee0444c83c2f4baa07e0f4ef4c375ebcb317b8
SHA512 66c1e158afac0ce4c14d5cccbf97325ff5bb40b4c79091f20de4f06055b1e8576c2b0a1788b6a645c4082edaf19741cbe7ee13fb68f88ad685c8c1b70b6bc537
SSDEEP 196608:c2Vq9x1dy5XOSxIJEO2tpkQmJueAWNFaNx/RhETSEGhcWNje5SPMR:S9x1dVSSJEVwbsWNF4xYOdhe59
TLSH
T166863395626009E0FCBCC43F8105C92AD6B67C7BA364D98B13E8C6571F635F6293EE81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5812 wrote to memory of 6628	5812	convert_raw.exe	88

C:\Users\Admin\AppData\Local\Temp\Converter-tool\convert_raw.exe
"C:\Users\Admin\AppData\Local\Temp\Converter-tool\convert_raw.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5812
- C:\Users\Admin\AppData\Local\Temp\Converter-tool\convert_raw.exe
  "C:\Users\Admin\AppData\Local\Temp\Converter-tool\convert_raw.exe"
  2⤵
  - Loads dropped DLL
  PID:6628

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58122\VCRUNTIME140.dll
Size 99KB
SHA256 ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
MD5 8697c106593e93c11adc34faa483c4a0
SHA1 cd080c51a97aa288ce6394d6c029c06ccb783790
SHA512 724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
SSDEEP 1536:7y6+2mUD0uBFRXqYue/o+18iBH5T7heunxr98nZXR9xecbSQ2bIB0TO:7lXfRXqQw+PHLrCZh9xecbSt
TLSH
T147A36B4AB6A442B7D16AC174C4F39A47EB31B485873053CF03B58AA90F67BE15E3E391
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI58122\base_library.zip
Size 1.8MB
SHA256 092581ab780b719ea3638f6ad6e8473c3f472629fcdc8f1bcebdf259659d32fa
MD5 c4277acb36c0a625f1588a842451e88f
SHA1 185ec7d6c933c50f01fe729b6bc4c1a29356aabd
SHA512 f0c785c5ce57c6d08ff8db3528d5a09a185311a678710767ccc86a23bb63a9dbc0c6b47a8a432794d56607195bec70a7d390ad6147d13728bae51ce41a708e20
SSDEEP 24576:mQR5pATuz/R5lUKdcubgAnyfbPQzr0iwh9E5dYf9Pqe6oToWdWQhHHHx:mQR5p1/R9zLb7WwQT
TLSH
T1C7853B817992A4B7FC04F3BA8026090DB328C5F5F740C75739AFC1A6AF9E6A46D518DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58122\python311.dll
Size 5.7MB
SHA256 162e8557fbed5f39ae24983ee62b2d435b4796c937d9c1a34371888c7e43af00
MD5 34baa8088b479361208b691a87aa5238
SHA1 0034f14fbcb1328dd5a65395f47c00c7ef72cbaf
SHA512 6900da9a20bcefea0c334f07c758fdce991753dd0f65cc5587800c544110343f9beed7bce8b534b8531db009f1824d3e454157d45a1a95e1dff2472572b6edff
SSDEEP 98304:OlLjFejcsigx+tzVlPqn+rs3BiVHOMpxHdjBT:SLjFxyxszVlPqnEs3KpB
TLSH
T161563929B2A14060C97781358E2B9606D7A17C546F11EBCB21B0F7991F73FE30AFA359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58122\ucrtbase.dll
Size 992KB
SHA256 8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae
MD5 0e0bac3d1dcc1833eae4e3e4cf83c4ef
SHA1 4189f4459c54e69c6d3155a82524bda7549a75a6
SHA512 a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd
SSDEEP 24576:VkmZDEMHhp9v1Ikbn3ND0TNVOsIut8P4zmxvSZX0yplkA:mmZFHhp9v1Io3h0TN3pvkA
TLSH
T12425AE68F66C0AA9D07BE17CC91B550FE9B23406477096DB03E64BB93E2B7D5163B320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58122\zlib.dll
Size 85KB
SHA256 54c755e6b90499a5ef49a65ce9472535286fe4db3565a06c4a53f8a4833532dc
MD5 d00d9d7b9e0215553c30bb974009356b
SHA1 4608882531ad0c106732682cbe746d911c38fc9a
SHA512 8795959cdd8525b449193b90cebe81e8ae7876858a6cc706a255c6d2af5696be92e1dc93ef34551b4888b51c1f5dce920d834ef6ff8f8f4693cd4433e488dc56
SSDEEP 1536:8p1lgN6zud9Uvug5vx8QBrsHaXBb2nSCvIOcIOyeJK5qQzu:EgN6adi2g5vxLRWSChSy15qQzu
TLSH
T1CC837C892AB422B6C6F2417094D3579ED370B01407A14BDF8648A7A91F13ED52F3A3FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download