Overview

overview

7

Static

static

3

SysUpdate.exe

windows10-2004-x64

7

SysUpdate.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    137s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 12:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SysUpdate.exe
  • Size 7.9MB
  • Sample260719-p2cxtabv7q
  • SHA256 580a07c3a3b463e730d972c44baafd5f7d175764c83e52024fa76b541cf0cb1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 9 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SysUpdate.exe
    "C:\Users\Admin\AppData\Local\Temp\SysUpdate.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4680
    • C:\Users\Admin\AppData\Local\Temp\SysUpdate.exe
      "C:\Users\Admin\AppData\Local\Temp\SysUpdate.exe"
      2⤵
      • Loads dropped DLL
      PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\VCRUNTIME140.dll
        • Size 121KB
        • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_bz2.pyd
        • Size 71KB
        • SHA256 5963c4395340011057cbbdca3ded0f58cf012fd9662bc0c7381494336ee5f276
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_ctypes.pyd
        • Size 116KB
        • SHA256 8547d4c7342a36211dc76483a765577155cbf0974e48a7b354bf862917cc025e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_decimal.pyd
        • Size 239KB
        • SHA256 019dda4d6f84e52953752da563ada0601a781fbef92b0f32527490b07c4ab60c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_hashlib.pyd
        • Size 52KB
        • SHA256 e1a908c1af2668b443783da2d2d3782b4edb54f77f13c7b839c8dd9230d5da80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_lzma.pyd
        • Size 149KB
        • SHA256 5d1ed5d0d287b718a8589bc22b7279577630374de05061e75cbd090e305d8053
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\_socket.pyd
        • Size 66KB
        • SHA256 aa28c01718d819a6b0c32b1a66a758200e3110947a4c17bdaacfeed512863a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 f35e9be1b6d7af861d2598a63b5919550c8bbcc4bb5ccfdd0db617915e60fb2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 47e9a87ee9ffae868d933abc51687e770f25a361b1280c450bb0598246802779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 30abfe1e27658066dea95c855ae13a5e78defe6fa4aaeb30586c0925d2f64ff9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 bfc9431629c9b15060fed77b6595c702f8bebbbbdd6b420b41f1f99fabf65199
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 8d2bff9d2dd98b242753ce9e5cbddde7106e702fad4361bd6723ac7dce77fb49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 6ca57cab1049e0973488ba8329f568ebf6d1c92f251a92d6c9dcdf580dee66fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 27b288c08ef17c90a2f2debcfc3aa9f38d51407aa12dcb1334910aa762530b25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 06ebe2b53e85da11c56de145d764040dd421eb0555ec46bdf01a1e06f008e2eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 fbed881c667c15c9a36633a173155bddc5787580a85b95620d1e94fdd4514342
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 54b860fc636618145e1a1e1013bca72f733136bd21ec48f07d5c00a8e7e7015a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 d878e3e4e373b140f563f09a34e278b95061425be89f73fdcd4e28a7b44a114f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 2381d7a948583e0fa27a587b088fb56f8c60ffc4143c74027775ff8fdc3734cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 aa4f3867206b721b699cb238110de3154a70ed0b4dd1cfa8087d5dbcc35952ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 a96500cc42c7a294b9aaa7dbd036ba3cca905b984a63e6310ef0f623704f4754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 b6e2db9167221ca7934190be616667f55c7ad04679bdd5eabc166943ac1b50c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 cac8ce1fe3974393a25866dd6d50e41cc6f4115ff2ddf5d329348dd2bf2b20aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 bd9690d8ae8ec788d42b9cbdcbedf0d735db04c5384797a97c57dc645a1b7a77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 d74f892ca19da72876ca6dbd8e074624051fdc4d84954beba6621121c02cc679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 b1bfe0292e506afd6c37a4ffe029651c06ac6cdee24792d16a8c0d8839ed885d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 b79b04f31e31c70f9bea1dc84d12e1a62937b46fc4713bf2801890aaca2a5d95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 35355cac6dcf65f0de3da0c97f6205801f136d7d5ae64b3d7721a272c119c000
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 4d02a98485598e4bcafc04c7198c5f4c27b03ae2c8a5d0cf1019eb00f0b3219c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 7fb53a17fdc05885e5983e6e5ac55014b54bb101a42d402456843c45c537997a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 39daaefd1c4dec20ca9905e70bfa27003e7a883fc5a452a9a2e10588179a043f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 3c306af22a003631358ee88e7887a609196e9a4b4355b97e633879443444b952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 36acb5d4b23481254fd3911c616dfff699ad5b518cbd70faed47e3fbf360d877
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 fe53a92a258686f3497df35a4212de722223e19e479df5bb78768788ff70c4dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 8982cc1cac1fbb3ea6acd8ca190520b92485b03a60182cff7969b02446b69aff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 d62497280814afffc6952d74db3ddfbd735331d0f7b85d2798c4c043032c1e79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 3977fa0754303012f2242cc871cabb8d4629b18fb3a151445e0db0dc243e31ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 09f58c00c73c545254b5d893aeb34997cfbbd48c3459bc5a42404e6d4dba955f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 870d6eeb9d32cc8699f72b407d41b410c441c41fe8ed359d9f8509bd76e396c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 a99d391ab063e326465dd63dd5ca5d67a0b6d928dce6a8389b9453c4aa8a5212
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 7f689d64926732a5a0a8137483ac6b2697c3b279ef433ef409960618ac7f0603
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 77e735b1a1bdfa2465a2008a09ca795498b96dec3280e5b85351321649621984
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 5977cea9ba9f32e2690ae5bb625ccc8a302770443998f6d0d77bb40f9857caca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 6857c098c56cee017b7fecd4707a1f2570278bb49e50bb9dead103bfb9c6919b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 8f8bd91e637f661b650db0ee5cf2f31a68d3d97ce21df363e9c5e08988c2417e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 aea5e841e00fc69bfa4891f63f60fbf82a11fbeff8307217d46fff8751309791
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\base_library.zip
        • Size 1.4MB
        • SHA256 90979afcaffa43761ad057aec56cfd9e6c173d3b5d08af40675bec61e63dc802
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\libcrypto-3-x64.dll
        • Size 7.6MB
        • SHA256 66348c968f8df22da0975d0141dc027cd0539f84f90d3a40542dd510540c3928
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\libffi-8.dll
        • Size 27KB
        • SHA256 1fdb7354fdb82f624bc849d8a360e500264fb9ba7171ed5378195cf0b3191073
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\python311.dll
        • Size 5.6MB
        • SHA256 e1b53c741751563eca9eac70378de5be36994adac8c27e8ec375971579e23b50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\select.pyd
        • Size 18KB
        • SHA256 c578113c92d107288f347feb53aaf839e554f7b9aa1c5b44676b38cfc5872778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\ucrtbase.dll
        • Size 1.1MB
        • SHA256 24efdab5f37467fd6a24d2216f9917fa9a8c8863ab3efe343d2db1a91b6d32b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46802\unicodedata.pyd
        • Size 1.1MB
        • SHA256 70719ed7c2cc738f80d7a0d23d9f0955f8c3f10ffe55effa64b836ce6b5a765a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download