Overview

overview

7

Static

static

3

usernamechecker.exe

windows10-2004-x64

7

usernamechecker.exe

windows11-ltsc_2024-x64

7

usernamechecker.ps1

windows10-2004-x64

3

usernamechecker.ps1

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 13:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    usernamechecker.exe
  • Size 58.3MB
  • Sample260722-q433fsfd86
  • SHA256 dbaceb898e1df9fbae713ff6e712f249fafa86c654786bf849c00d57e38105d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe
    "C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5628
    • C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe
      "C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:4128

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\PIL\_imaging.cp37-win_amd64.pyd
        • Size 2.3MB
        • SHA256 356142a3639d2b1dc7b71a794ef3c6085a8121eb721f4061a25a82235326ec45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\VCRUNTIME140.dll
        • Size 87KB
        • SHA256 bf5ff4603557c9959acec995653d052d9054ad4826df967974efd2f377c723d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_asyncio.pyd
        • Size 71KB
        • SHA256 24a0be8d4c4c6260720f89e0a99840305f182d06220306c70785a1bfc8903bb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_bz2.pyd
        • Size 87KB
        • SHA256 466d21407f5b589b20c464c51bfe2be420e5a586a7f394908448545f16b08b33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _contextvars.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_contextvars.pyd
        • Size 22KB
        • SHA256 94b38784f2349f803cb62abb8b8fd9f2352c9dc891acf8b3d2f1b8b745b7d79b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_ctypes.pyd
        • Size 129KB
        • SHA256 09887f07f4316057d3c87e3a907c2235dc6547e54ed4f5f9125f99e547d58bce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_hashlib.pyd
        • Size 38KB
        • SHA256 bdf4a536f783958357d2e0055debdc3cf7790ee28beb286452eec0354a346bdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_lzma.pyd
        • Size 251KB
        • SHA256 a4cba6d82369c57cb38a32d4dacb99225f58206d2dd9883f6fc0355d6ddaec3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_overlapped.pyd
        • Size 43KB
        • SHA256 2d30cd0be4a129a88fba368c0b14957905b3112869c8133b8f7e78dcf7edf1e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_queue.pyd
        • Size 27KB
        • SHA256 2ffa512a2a369ccd3713419c6d4e36c2bd5d1967e046663d721d7e7ac9e4ab59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_socket.pyd
        • Size 74KB
        • SHA256 4ba5d0e236711bdcb29ce9c3138406f7321bd00587b6b362b4ace94379cf52d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_ssl.pyd
        • Size 120KB
        • SHA256 45c8b99ba9e832cab85e9d45b5601b7a1d744652e7f756ec6a6091e1d8398dd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\_tkinter.pyd
        • Size 68KB
        • SHA256 f1a586c8592e35c397a87d7658bff34dde2b2cc4b9151c885bc885c4792f5f92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _frozenlist.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\aiohttp\_frozenlist.cp37-win_amd64.pyd
        • Size 63KB
        • SHA256 bac33e0f292483046c9aa01c5a4d86f68f2c3ab4240845c65756158ce393390b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _helpers.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\aiohttp\_helpers.cp37-win_amd64.pyd
        • Size 47KB
        • SHA256 0575c621abb17eaaf6914dc5e1415da453d89c5e4ce0ee45c14832bc425e8b3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _http_parser.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\aiohttp\_http_parser.cp37-win_amd64.pyd
        • Size 232KB
        • SHA256 296a86f86018c9c868b7bb39ac1e29852cceba1623295994d8fc515335cf0545
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _http_writer.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\aiohttp\_http_writer.cp37-win_amd64.pyd
        • Size 41KB
        • SHA256 debb0e712b1b6fb98ce65094ab564309b962271c6b6a13da24a0bfd5d3a32b1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _websocket.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\aiohttp\_websocket.cp37-win_amd64.pyd
        • Size 27KB
        • SHA256 b44aa794b88eecc2699383dad0319dafbd031e0ee2edef15965134808443ea5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\base_library.zip
        • Size 994KB
        • SHA256 7cb0a3552fd70948b1664432e442d601d7d2a446b9163aaa1e79eaf1307b7f8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\libcrypto-1_1-x64.dll
        • Size 2.4MB
        • SHA256 2a57183839c3e9cc4618fb1994c40e47672a8b6daffaa76c5f89cf2542b02c2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\libssl-1_1-x64.dll
        • Size 517KB
        • SHA256 9d35d8dd9854a4d4205ae4eafe28c92f8d0e3ac7c494ac4a6a117f6e4b45170c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multidict.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\multidict\_multidict.cp37-win_amd64.pyd
        • Size 45KB
        • SHA256 a874aa34a46df245bfc6c5ef5b213deca84e8e051c4f022b2f0463f12b6da56f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\psutil\_psutil_windows.pyd
        • Size 69KB
        • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\pyexpat.pyd
        • Size 192KB
        • SHA256 3aea3048fd56f0e4cea65401d36df2185f516aa31fcf92f93c28e569072246bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\python3.dll
        • Size 57KB
        • SHA256 caea9ad7ed099acf1fb8e9481480def0ac0cabb9d368bb7043fcdf2e2829d121
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python37.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\python37.dll
        • Size 3.7MB
        • SHA256 17c29e6188b022f795092d72a1fb58630a7c723d70ac5bc3990b20cd2eb2a51f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\select.pyd
        • Size 26KB
        • SHA256 56d1a971762a1a56a73bdf64727e416ffa9395b8af4efcd218f5203d744e1268
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\tcl86t.dll
        • Size 1.7MB
        • SHA256 7116542f44a2976574500cc1e8c6f0aeaaf95c18486066bc7eb133effceb5d0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\tk86t.dll
        • Size 1.4MB
        • SHA256 f03b80778ce77ffbc759644b45a324598863dce0d260fe3fa71ca5de400265c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\unicodedata.pyd
        • Size 1.0MB
        • SHA256 71b13fd922190081d3aeec8628bd72858cc69ee553e16bf3da412f535108d0e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _quoting_c.cp37-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56282\yarl\_quoting_c.cp37-win_amd64.pyd
        • Size 95KB
        • SHA256 5264fcff96ca9558663e9cbe649a11d9261859f7d9056775694a0452c6c11845
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download