Overview

overview

7

Static

static

3

usernamechecker.exe

windows10-2004-x64

7

usernamechecker.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    30s
  • max time network
    11s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 14:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    usernamechecker.exe
  • Size 58.3MB
  • Sample260722-rbbyyafe79
  • SHA256 dbaceb898e1df9fbae713ff6e712f249fafa86c654786bf849c00d57e38105d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe
    "C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1276
    • C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe
      "C:\Users\Admin\AppData\Local\Temp\usernamechecker.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:3204
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:3852

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          _imaging.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\PIL\_imaging.cp37-win_amd64.pyd
          • Size 2.3MB
          • SHA256 356142a3639d2b1dc7b71a794ef3c6085a8121eb721f4061a25a82235326ec45
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\VCRUNTIME140.dll
          • Size 87KB
          • SHA256 bf5ff4603557c9959acec995653d052d9054ad4826df967974efd2f377c723d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _asyncio.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_asyncio.pyd
          • Size 71KB
          • SHA256 24a0be8d4c4c6260720f89e0a99840305f182d06220306c70785a1bfc8903bb4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_bz2.pyd
          • Size 87KB
          • SHA256 466d21407f5b589b20c464c51bfe2be420e5a586a7f394908448545f16b08b33
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _contextvars.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_contextvars.pyd
          • Size 22KB
          • SHA256 94b38784f2349f803cb62abb8b8fd9f2352c9dc891acf8b3d2f1b8b745b7d79b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_ctypes.pyd
          • Size 129KB
          • SHA256 09887f07f4316057d3c87e3a907c2235dc6547e54ed4f5f9125f99e547d58bce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_hashlib.pyd
          • Size 38KB
          • SHA256 bdf4a536f783958357d2e0055debdc3cf7790ee28beb286452eec0354a346bdc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_lzma.pyd
          • Size 251KB
          • SHA256 a4cba6d82369c57cb38a32d4dacb99225f58206d2dd9883f6fc0355d6ddaec3d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _overlapped.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_overlapped.pyd
          • Size 43KB
          • SHA256 2d30cd0be4a129a88fba368c0b14957905b3112869c8133b8f7e78dcf7edf1e9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_queue.pyd
          • Size 27KB
          • SHA256 2ffa512a2a369ccd3713419c6d4e36c2bd5d1967e046663d721d7e7ac9e4ab59
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_socket.pyd
          • Size 74KB
          • SHA256 4ba5d0e236711bdcb29ce9c3138406f7321bd00587b6b362b4ace94379cf52d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_ssl.pyd
          • Size 120KB
          • SHA256 45c8b99ba9e832cab85e9d45b5601b7a1d744652e7f756ec6a6091e1d8398dd4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _tkinter.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\_tkinter.pyd
          • Size 68KB
          • SHA256 f1a586c8592e35c397a87d7658bff34dde2b2cc4b9151c885bc885c4792f5f92
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _frozenlist.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\aiohttp\_frozenlist.cp37-win_amd64.pyd
          • Size 63KB
          • SHA256 bac33e0f292483046c9aa01c5a4d86f68f2c3ab4240845c65756158ce393390b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _helpers.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\aiohttp\_helpers.cp37-win_amd64.pyd
          • Size 47KB
          • SHA256 0575c621abb17eaaf6914dc5e1415da453d89c5e4ce0ee45c14832bc425e8b3b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _http_parser.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\aiohttp\_http_parser.cp37-win_amd64.pyd
          • Size 232KB
          • SHA256 296a86f86018c9c868b7bb39ac1e29852cceba1623295994d8fc515335cf0545
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _http_writer.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\aiohttp\_http_writer.cp37-win_amd64.pyd
          • Size 41KB
          • SHA256 debb0e712b1b6fb98ce65094ab564309b962271c6b6a13da24a0bfd5d3a32b1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _websocket.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\aiohttp\_websocket.cp37-win_amd64.pyd
          • Size 27KB
          • SHA256 b44aa794b88eecc2699383dad0319dafbd031e0ee2edef15965134808443ea5a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\base_library.zip
          • Size 994KB
          • SHA256 7cb0a3552fd70948b1664432e442d601d7d2a446b9163aaa1e79eaf1307b7f8e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-1_1-x64.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\libcrypto-1_1-x64.dll
          • Size 2.4MB
          • SHA256 2a57183839c3e9cc4618fb1994c40e47672a8b6daffaa76c5f89cf2542b02c2f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-1_1-x64.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\libssl-1_1-x64.dll
          • Size 517KB
          • SHA256 9d35d8dd9854a4d4205ae4eafe28c92f8d0e3ac7c494ac4a6a117f6e4b45170c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _multidict.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\multidict\_multidict.cp37-win_amd64.pyd
          • Size 45KB
          • SHA256 a874aa34a46df245bfc6c5ef5b213deca84e8e051c4f022b2f0463f12b6da56f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _psutil_windows.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\psutil\_psutil_windows.pyd
          • Size 69KB
          • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\pyexpat.pyd
          • Size 192KB
          • SHA256 3aea3048fd56f0e4cea65401d36df2185f516aa31fcf92f93c28e569072246bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\python3.dll
          • Size 57KB
          • SHA256 caea9ad7ed099acf1fb8e9481480def0ac0cabb9d368bb7043fcdf2e2829d121
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python37.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\python37.dll
          • Size 3.7MB
          • SHA256 17c29e6188b022f795092d72a1fb58630a7c723d70ac5bc3990b20cd2eb2a51f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\select.pyd
          • Size 26KB
          • SHA256 56d1a971762a1a56a73bdf64727e416ffa9395b8af4efcd218f5203d744e1268
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\tcl86t.dll
          • Size 1.7MB
          • SHA256 7116542f44a2976574500cc1e8c6f0aeaaf95c18486066bc7eb133effceb5d0c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cp1252.enc
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\tcl\encoding\cp1252.enc
          • Size 1KB
          • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\tk86t.dll
          • Size 1.4MB
          • SHA256 f03b80778ce77ffbc759644b45a324598863dce0d260fe3fa71ca5de400265c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\ucrtbase.dll
          • Size 1.1MB
          • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\unicodedata.pyd
          • Size 1.0MB
          • SHA256 71b13fd922190081d3aeec8628bd72858cc69ee553e16bf3da412f535108d0e4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _quoting_c.cp37-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI12762\yarl\_quoting_c.cp37-win_amd64.pyd
          • Size 95KB
          • SHA256 5264fcff96ca9558663e9cbe649a11d9261859f7d9056775694a0452c6c11845
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download