Overview
overview
1Static
static
1_asyncio.dll
windows10-2004-x64
1_asyncio.dll
windows11-ltsc_2024-x64
1_bz2.dll
windows10-2004-x64
1_bz2.dll
windows11-ltsc_2024-x64
1_ctypes.dll
windows10-2004-x64
1_ctypes.dll
windows11-ltsc_2024-x64
1_decimal.dll
windows10-2004-x64
1_decimal.dll
windows11-ltsc_2024-x64
1_elementtree.dll
windows10-2004-x64
1_elementtree.dll
windows11-ltsc_2024-x64
1_hashlib.dll
windows10-2004-x64
1_hashlib.dll
windows11-ltsc_2024-x64
1_lzma.dll
windows10-2004-x64
1_lzma.dll
windows11-ltsc_2024-x64
1_multiprocessing.dll
windows10-2004-x64
1_multiprocessing.dll
windows11-ltsc_2024-x64
1_overlapped.dll
windows10-2004-x64
1_overlapped.dll
windows11-ltsc_2024-x64
1_queue.dll
windows10-2004-x64
1_queue.dll
windows11-ltsc_2024-x64
1_remote_debugging.dll
windows10-2004-x64
1_remote_debugging.dll
windows11-ltsc_2024-x64
1_sqlite3.dll
windows10-2004-x64
1_sqlite3.dll
windows11-ltsc_2024-x64
1_ssl.dll
windows10-2004-x64
1_ssl.dll
windows11-ltsc_2024-x64
1_uuid.dll
windows10-2004-x64
1_uuid.dll
windows11-ltsc_2024-x64
1_wmi.dll
windows10-2004-x64
1_wmi.dll
windows11-ltsc_2024-x64
1_zoneinfo.dll
windows10-2004-x64
1_zoneinfo.dll
windows11-ltsc_2024-x64
1General
- Target python-3.14.2-embed-amd64.zip
- Size 11.5MB
- Sample260721-qdbkhswfpd
- SHA256 f05e28d161c6b15af64a7cb7f08b4a22b3a6b03eee71baee24ea557b3bdd5798
- MD5 85a5dcd0350f7ca4e2876295b0b281e3
- SHA1 e1f8c4ffa4cc383d8449816d5cf664859d6c64bc
- SHA512 d72d4f036c4dd563c4ac15c7162bf63406d3fd83a44877300ff87e4168f211d66b8209fdd3ad39ea549b8bc46c092b4ecab3b24b0da2f8950e0e5642828e99f2
- SSDEEP 196608:yyoIwavl6KcCgYi6IrlTEH7b061Wrrr23Mc5EeFNQLEPz0qN6wCq2qV9nEGCo4:joI5HniDlTEH7b00W5EEeFNrhOqVyGC/
- TLSH T16BC633C461DE2A51BABDE13859FC8E01129A63DB7261576C5B5A3EE30CCF2363F6804D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
_asyncio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
_asyncio.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
_bz2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
_bz2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
_ctypes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_ctypes.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
_decimal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
_decimal.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
_elementtree.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
_elementtree.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
_hashlib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
_hashlib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
_lzma.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
_lzma.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
_multiprocessing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
_multiprocessing.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
_overlapped.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
_overlapped.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
_queue.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
_queue.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
_remote_debugging.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
_remote_debugging.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
_sqlite3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
_sqlite3.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
_ssl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
_ssl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
_uuid.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
_uuid.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
_wmi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
_wmi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
_zoneinfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
_zoneinfo.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target _asyncio.pyd
- Size 76KB
- SHA256 f9dc3b563e0b313e3fa5364c2f14b1fe08d004d70126a6de5d78826db77c6318
- MD5 e9ff314adb895f5aeff2acc7de8ad7f4
- SHA1 4e33805d155897f85313253436e021b5c6e9ea04
- SHA512 56eea1ca70b712bd3bf4e6b6735fcbaced8591286a73fa9a18c122e5c4bacc23851fe3ea41093c4371cf1b604d085e32d019e30a66acc8ef4454c0a5976f3b01
- SSDEEP 1536:qo3BmEP+e2XbiHub0AVFDsdoISDngLycA89SfIk9LG:fSXOHuYAVFDsdoISDngt
- TLSH T134736D8792A44086EEF79134CE536FD3FBB0F1855905938F56A4C18E1F133A18BBA726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _bz2.pyd
- Size 85KB
- SHA256 082a761a280b08afecf6fb0509050ffbf7e87d1638ca49466b8b3eb4c85009b4
- MD5 b831ff0ab5f28a1f3bae6842896d45ff
- SHA1 e96c4dc15ef8f55fa47eef0f5e3d4a184eeef764
- SHA512 bdac51598e349a96aa399f8d6fc6ed46b8ff797bb70b372290a941581f4b63318df9578a557a297873b827b2de2eec8cc14e3c1241cf65f3e71f5653d7b034da
- SSDEEP 1536:jGNqB8z7DyEXkmNf0/ixk+x5dxNkP88l3ub8zMDIGQIS3VvcycA89JfIYhE:CNqB8zSEJUoZlTkUGK8zJGQIS3VLV
- TLSH T189838D86F36552B6F99FD1B846840793F734BB860750A3AFF148829A3F13BD06E5C225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _ctypes.pyd
- Size 139KB
- SHA256 a11d680d89f054584e6a5b2a03103d8731def86e367aff2f70cce8c6367f9025
- MD5 208e7dd066f23080da03b4ebd20fbc43
- SHA1 8b56760b26be7c98a6752cacb3e78716972089ba
- SHA512 7841d4a3d6b04d00eff9e6a7ebdffea6d5a257bc095bfdfe33ffe78f2d0ce731af5021206b8e3b2e0da5ab0a27b0a65d149c346ea6c1d95fdd75087a411de40f
- SSDEEP 3072:7Eyf/PRau5nIktyc7utl1OUIVi0I1sDdMIBU8ISGPiT:oy35aynVp0qUITGs7BUS
- TLSH T146D37E0B736440E6DAA78178C6739E57EBB1F0511A1087CF4264C9AB2F633A26E3F715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _decimal.pyd
- Size 283KB
- SHA256 dcc9555eaf911af7997777b94beea78f802a10f1e4f3c3d4df2f254d44c71797
- MD5 5bcfd857dc1088dce3cbd43bfebba363
- SHA1 3fb3d6dc3fb5f6d9621c4a3a5168ada5eae5990a
- SHA512 f7e455a732b6950606f6ceb17a75666e2c7fd76cf3b2f12728e5967e8980dbdd960e0301875e96e652411789385b199b75b4697c43b1b2ade1346e72a8018717
- SSDEEP 6144:9VyJ3YE9GFkzC6/gHdKHFXsGqqM43fIWeA4QuMkXWHJCb7W:9VyJoE9+kzx/gHYdT7/kmU7W
- TLSH T1D2547D56A3490CA4EF778434CA879A57F7B2B8414360D78F43A48A972FA3393277E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _elementtree.pyd
- Size 135KB
- SHA256 20086a4dccbf8bf3df3894665dd69d8c73cc6bdab5076ac4481c3983a02c605e
- MD5 a32c4f3818e9f7454a995798e742f351
- SHA1 29dc8c2c8e5eac358d2523126c001d073c2d7d2a
- SHA512 4c66ba52e02e4f5198c938497909dc91e179ddcb7ba04350d6cd144179bc12f8d7c37d6b97f3d5d6cca5795c194e745c08baeacfb3d8ca75f14764b9ebb08fc9
- SSDEEP 3072:T3qm6NMLHY3kSN5kQUCZ6OrKgcZU1tHQ/mSHBAZDF71bAISffjT:7qm23kSDCCZ6OwSQheDdV2
- TLSH T145D3494B7265C0ABE462403CE6978B83D7B6F9610E0083CF6284F69D5F673917E6A718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _hashlib.pyd
- Size 67KB
- SHA256 0c11671a2c572b4c016be263789f238125419df5711e281acdce8da50d9badda
- MD5 4f7f664e8558a6cfc93ede2ae9d6974a
- SHA1 0b5ed2b9c68120d5912f12c1d6038afe517547a1
- SHA512 89cc41406f4b3da7ea46e15e12f86135ffe8c3fa2d906c8aa370402cfa4bd67fa00e2901e33e3e44daed075ddb9ac35c4dfd3181c44544d17c97522363227b85
- SSDEEP 1536:aL0SOWZsPqJWvnKt6RfoISDI1ycA89tfIYke:ULYyJWvnKt6NoISDIYM
- TLSH T1A2636B4AA6984062DA2382B4C8E34F43FA74F652271197DF6779C18D2F233C3537A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _lzma.pyd
- Size 157KB
- SHA256 2376cd374ce8c2c5ecf573226e563a96975599533f86a5f5eba5bdb705e341bb
- MD5 d412fca808a8dd9178ccf8bd9517859b
- SHA1 6088ee0ee94f6a245bac0a0d1c0e664ca630cc07
- SHA512 35afe64a19ff6737b662b9359e591bbb00c169e83609dff1c2ab1fac829316200b8a121d1bedb28bef832e7968a95e01986d20f8cb0d511e7b0d794010484e8d
- SSDEEP 3072:M0m6DHDbBwiZfxA/VcNBznfx9mNoX3mfnbOQISI1jmT:MTCHDjfDNJpYOGfbO3+
- TLSH T1E8F35C86B394F0E6F7228C38D6614F57E7F5791A0320929A01CC976D2B1FB659A2F313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _multiprocessing.pyd
- Size 37KB
- SHA256 95d858739bfff9b9116cc790596be9774b5c2c7ae509a0fc3e235a5d370b06ab
- MD5 cf5bd1060140da40260e573e5f0ca9d4
- SHA1 73d215ff25eea340f362c35ac51fcfd902490778
- SHA512 f036f50e8892faed59e672ae6139111946845f78e4d69a4178d655c205297d12bc70ebf2f35be3d1e0422039cc78b0f6d55ae061ece17137b7a61c24654b8e67
- SSDEEP 768:sFMV/Z2l1bv6HGlYIS7tlxycTOJh2Ip4caTxf1mlIJYpd:sk2l1bv6HoYIS7tvycA89PfIkYf
- TLSH T190038D86A6681053E9679631C5A3EF86F534F3870B21869F71A5D1CE0F37381B36A34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _overlapped.pyd
- Size 56KB
- SHA256 03b191b897be7f98e177a8ccffd5df76305720d3ce16a979abfca3f6223f4d13
- MD5 b256a437057703f7d10f64ebd3be281a
- SHA1 26f0c31e3984243caa4daa5ab1e81fdf2a3b3fc8
- SHA512 0c4c384276ea3b98fd36a55b60b2e1c4b9bc931c6d6c7d17533dd2b719c22093a03cfd75539253078536026804d36b6f6c021afd3fd23329645d9d96182ac175
- SSDEEP 1536:NyjKfH92YcQEeWa4ArUWBUISCtUycA89rfIYTX:3Wa7rUWBUISCtXm
- TLSH T1BD437B4967A401DAEE77D178D2639E47FB34B3D30211932E61A8D24A1F63392A72F385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _queue.pyd
- Size 35KB
- SHA256 8e75c8667f938c3e9b2e9739c09b08517b487437757f125ac400c70c7eadf270
- MD5 da5725ad6e85ce51c26e6b166a42e4a0
- SHA1 11c7a9e2ad7c88eda5546ebde644d0d4dd748132
- SHA512 bd1a145368309230c4898d6d0815b17fcbb0b7ddeed8e6b76ebb8e9d9faf76bdcfd7d2f5fa39ea12ecb82ae474d5277447bc472ecf0baff911951f86cb5d28a3
- SSDEEP 768:C6KN6rbeVOX8ISRURnxycTOJh2Ip4iz2Txf1mlRaXUCWP:RbeVOX8ISRURxycA89iyfIYUz
- TLSH T157F27D89AA585197EA63C970C1A6EFC2F934F7D3470187DF2179C18A1F233C1A73A259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _remote_debugging.pyd
- Size 73KB
- SHA256 55510544db57872ceec529105438b55a709ed070ff4241d4ea8642b274bf5611
- MD5 e079a5747707f38acd519b33faa62f9c
- SHA1 dfe82dc0fb235e7f98b2d730ae03329a628c6569
- SHA512 714fe646268b413b8808993cde675bea0cca80d19aa442a29cdc5eece4e7d0760712d32a817f9e4b1bd8ed0535abfd0eaec2365f0260e1aa4777528025c88100
- SSDEEP 1536:Wx1iugNNUtqtu1GjUe5dNhHztV8YISEoCgycA89jfIbHfv:Wxic8KQUqhHztV8YISEo+T
- TLSH T1CA733B6B63B400A9C8534177D8B5A923EEB2F1853F1452EF5458E26F2F163E37A7A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _sqlite3.pyd
- Size 129KB
- SHA256 2e76f9b0c284bcf8ad48482f8686a25453c7fded9c206f5bf7af675761def246
- MD5 c5c48768f79cdb34317fb7bfc3a2918e
- SHA1 49beeb7546c79c38034a7c2ce3af7f0a0b9c473a
- SHA512 ee78aeee59192b176308eb539df10ac92be32876a8d0d204ee2a1e3158cab7051055d027180fb287cef6c4725f7390c115de492fcfa622ca22258acf96f07aac
- SSDEEP 3072:3BEdRpVWQpTfOjSJTCcUC56aSoOk5GFoISDQoT:3YVWkOjN+58k5Sm
- TLSH T1DED35B6B631401A6F9B742B8C6734A43EB74F5615B6143DF42A0C24A1F373D26F3AB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _ssl.pyd
- Size 180KB
- SHA256 bc17486f149f7311839c70b1cda5a22e4546a9670d3136d665df95ff3cc43abd
- MD5 6252eee501b79b472903a978872518c3
- SHA1 dee9a3ab7444ae6ff203d585ed5b18f2af4b508b
- SHA512 752947bce9d8177cb93100911a3c4fb74aa86c72f5b7f4b733636673459fe22f30812e9cfd34d7ee29e34e4ccef37b20559fd05b3f371be1f5d2ba89b64aac09
- SSDEEP 3072:6QjyHsqUEao3kfF6Cu3qMX31Wzy4zXClit8aN4Qp8VuMG4eJ9i1zktdsQ/3/UpnA:SJUEV3QF6Cu538zyAUBzbT0
- TLSH T1C5048C47B1846AF7E913E4F9C6234543EBB4F145332297DE48C6DA860F03346AE66B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _uuid.pyd
- Size 27KB
- SHA256 d75d04aa989f8be9666505ac11339416719e38fc0701047388b061b4e576030a
- MD5 b166cfb4f4a913ed861dbe9fb93ab388
- SHA1 5e21441f6a75347c887cfac5613aa4dc102ce385
- SHA512 b290c7b4dff5daba842979439c53f495740ced0555e59ffeeafcfe9063d202cf8f5ae658adb146b94f6113e4b7305f3200d2cf357fa1ba65696b08f1ff38d4ff
- SSDEEP 768:eYV25cQISIw0xycTOJh2Ip4kzTxf1mlRaXaCK:eYV25cQISIwMycA89kRfIYab
- TLSH T1D6D26D8A9A744053FE639770D1F6DF82F939F7D34A1146AB316991860E133C1B32B2AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _wmi.pyd
- Size 39KB
- SHA256 a299a6caf7241cebb0081c3ed9e98f815c61feee3e4813c1fd32369bd3fe6f5e
- MD5 72a4dfa925a2b6326a005601dcc4cb34
- SHA1 645d36a951c9f7c9ef7cf797ed600b25c04a82b1
- SHA512 46b7adc94db1ccd8773e3247a0d661784202c7ce05edbcf3a616376e011543a243c21eac776f1a07179a1f491efc23ced854fa68e7d700863463cfd2e947777a
- SSDEEP 768:q2/EEqrVmjstuQsQ9VVQIS3izxycTOJh2Ip4YTxf1ml9dHRjLJ:vE9BEbQsQ9VVQIS3iFycA89kfIbHRv
- TLSH T1E1038D89E6640092FA6BCA74C1A5CE93F575F7935712838F326582590F333D1E73A329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _zoneinfo.pyd
- Size 49KB
- SHA256 4be43e7e1628363e5818400fba3d45f944c5fd9edb18c8e7db3e4a9d6d19a3f3
- MD5 ff39fb3a768d91c4fad46890bb29a7cd
- SHA1 45bb1cc74b62cea267c620b99e4f24a179beb2b1
- SHA512 bdc5aeec92b129587f187f8faaa7c38cad144fcb327803f8a7e6a46fc17205f234d41aeb94636c4288bd8a3f59b8ee78e4d2c87a92574bd4a1c91be82276ec8c
- SSDEEP 1536:HPrRp7Je2pIbK9VnF7oISsXcycA89ffIYzD:DRfIG9VnF7oISsXrW
- TLSH T1D2338E8A9664518AED638571CB63DE83FE30F6826710C7DF2264C19E1F273C25B3A365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10