Overview

overview

7

Static

static

3

d1d877a19f...8d.exe

windows10-2004-x64

7

d1d877a19f...8d.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/07/2026, 04:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d.exe
  • Size 7.5MB
  • Sample260714-faatpsev3p
  • SHA256 d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d.exe
    "C:\Users\Admin\AppData\Local\Temp\d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3196
    • C:\Users\Admin\AppData\Local\Temp\d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d.exe
      "C:\Users\Admin\AppData\Local\Temp\d1d877a19fce99ae8fc55f3ea81f28f692b539bfc0f81f9bbc5056cc87dab38d.exe"
      2⤵
      • Loads dropped DLL
      PID:4552

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_bz2.pyd
        • Size 82KB
        • SHA256 6cb65b412907f22b7d349231bfb4c18ac558d5c5b55f83b24dc97a2ac5a57b72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_decimal.pyd
        • Size 246KB
        • SHA256 7694d1b3f32d571a12e1e5e17357566ca290ead098f418fc57983b3dd156c3e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_hashlib.pyd
        • Size 63KB
        • SHA256 a86536df67c124500c5a091a3397ec79065ab9e3e13c26ec36039b62b7d5ae92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_lzma.pyd
        • Size 155KB
        • SHA256 6cfb71b98e5d9bf78f220f8b955c23f0909213a06d41765e67f9a15dc84229e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_socket.pyd
        • Size 81KB
        • SHA256 b1e1029f0fe3a5e5ba6e6dde035d475bfdeeefaef5a6867843b33664ad1451e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\_ssl.pyd
        • Size 173KB
        • SHA256 fa9d801a83b407a133dc76b407158a978bdb9dbbc0cf55df6d8c548c4f304c61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\base_library.zip
        • Size 1.3MB
        • SHA256 be4f8b1416bd7e823fe672325547e5bbb50c4be48f3b0e13760fa41ef3614cad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\libcrypto-3.dll
        • Size 4.9MB
        • SHA256 c28efc8269a243656a4d6875f65ee787423bcf3d42e9ef6033a408d1ae7347e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\libssl-3.dll
        • Size 771KB
        • SHA256 e6acd4ac9618e8b24873a4ea489a2336c8c35a90a02885426fcc0100d6b43c8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\python312.dll
        • Size 6.6MB
        • SHA256 db007262c7b84c0cc8bf5969da86e3425680ef48bdbac59506f10abab0cd9f3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\select.pyd
        • Size 30KB
        • SHA256 11d7619d46f4b131c0b553565019e9774fdefec24a2a21f487e29d20c5d3d2e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI31962\unicodedata.pyd
        • Size 1.1MB
        • SHA256 792b1076e9d5db7c69039d51b085d4fa3d7afc26d7c97e5a388340e48f459e4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download