Analysis
- user interaction
yes - max time kernel
4s - max time network
13s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 22:28
Behavioral task
behavioral1
Sample
s.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
s.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target s.exe
- Size 86.5MB
- Sample260724-2dp9fsee56
- SHA256 c8a719e1c6bdffe74998efb18ab5c1217fce606184ce01a8283e018416cfc06f
- MD5 13fa1c517d94a00e5300f127aef0de28
- SHA1 8a6baefaf42daf05d87e44c8e20c6d57545b19dd
- SHA512 dd39b0ad2a4f5d8642ebe3c2703261c3802af0d4b7e5f5019e6bf895593491cf8e57e4fec3d9606062f0d7b9845732b6b7485e9b30c2b246901ac24adcef64e7
- SSDEEP 1572864:N15je+dy2J0f0/rBdsGjbpip0WWRW+eH++BDO0GutV5laLKAIHWqyHXM:r5KI5BBjtE0WJOUN72OHlyHXM
- TLSH T15318332852199DA2F6160737DA42C3077F3B984DCB9186990AF16C4713EB387AE7DC78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\VCRUNTIME140.dll
- Size 106KB
- SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
- MD5 4585a96cc4eef6aafd5e27ea09147dc6
- SHA1 489cfff1b19abbec98fda26ac8958005e88dd0cb
- SHA512 d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286
- SSDEEP 1536:GcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/woecbq8qZHg2zuCS+zuecL:GV3iC0h9q4v6XjKwoecbq8qBTq+1cL
- TLSH T1A0B37C4A72A441F7C5AAD274C2E38A06FB71B541877093CF03B19A690F63BE15E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_bz2.pyd
- Size 82KB
- SHA256 02d772c03704fe243c8de2672c210a5804d075c1f75e738d6130a173d08dfcde
- MD5 c7ce973f261f698e3db148ccad057c96
- SHA1 59809fd48e8597a73211c5df64c7292c5d120a10
- SHA512 a924750b1825747a622eef93331fd764d824c954297e37e8dc93a450c11aa7ab3ad7c3b823b11656b86e64de3cd5d409fda15db472488dfaa4bb50341f0b29d1
- SSDEEP 1536:FFzZz757cav+IuK66nlxX8W8LsANVIGCV87SyixL7:DzZzq6n3MhLsMVIGCV8O7
- TLSH T1F2839E93F3A055B5E41BA27699A10357E371FD4A039093EFB348835B2F13B913D6932A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_ctypes.pyd
- Size 121KB
- SHA256 bc3b83d2dc9e2f0e6386ed952384c6cf48f6eed51129a50dfd5ef6cbbc0a8fb3
- MD5 10fdcf63d1c3c3b7e5861fbb04d64557
- SHA1 1aa153efec4f583643046618b60e495b6e03b3d7
- SHA512 dc702f4100ed835e198507cd06fa5389a063d4600fc08be780690d729ab62114fd5e5b201d511b5832c14e90a5975ed574fc96edb5a9ab9eb83f607c7a712c7f
- SSDEEP 3072:kuiS11BYNd+5AWdu41qOqJ/f/EX4lCPIWu1ptpIGLP+z:Pl1U+Ke/16f/ExWI
- TLSH T13CC36B0B339410AAEBA34179C5B36E07D7B1B45A175087CF12A4C69A2F637936D6F312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_hashlib.pyd
- Size 63KB
- SHA256 e47e76d70d508b62924fe480f30e615b12fdd7745c0aac68a2cddabd07b692ae
- MD5 f495d1897a1b52a2b15c20dcecb84b47
- SHA1 8cb65590a8815bda58c86613b6386b5982d9ec3f
- SHA512 725d408892887bebd5bcf040a0ecc6a4e4b608815b9dea5b6f7b95c812715f82079896df33b0830c9f787ffe149b8182e529bb1f78aadd89df264cf8853ee4c4
- SSDEEP 1536:CQGllrIdcGuzZc94cVM7gDX4NIGOI67Sy+xzn1:I6cvz+9IgDX4NIGOI6Sn1
- TLSH T1DA537E46A2814498D92781B5D9A34E97FAF1F1051B11A7EF0368C2CD2F337C396FAB52
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_lzma.pyd
- Size 155KB
- SHA256 34130d8abe27586ee315262d69af4e27429b7eab1f3131ea375c2bb62cf094be
- MD5 4e2239ece266230ecb231b306adde070
- SHA1 e807a078b71c660db10a27315e761872ffd01443
- SHA512 86e6a1eab3529e600dd5caab6103e34b0f618d67322a5ecf1b80839faa028150c492a5cf865a2292cc8584fba008955da81a50b92301583424401d249c5f1401
- SSDEEP 3072:RmuEE9tZBoI+1hINrznfB9mNoNSn2Vh/VDxuVIGZ1L6E:RmuFPobkNpYONnvfuCE
- TLSH T14DF33992A394F4E5F7228C78D6624F13D7F678490310929A12CCC36D2B1FB759A2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_queue.pyd
- Size 31KB
- SHA256 2ad02d49691a629f038f48fcdee46a07c4fcc2cb0620086e7b09ac11915ae6b7
- MD5 6e00e0821bb519333ccfd4e61a83cb38
- SHA1 3550a41bb2ea54f456940c4d1940acab36815949
- SHA512 c3f8332c10b58f30e292676b48ecf1860c5ef9546367b87e90789f960c91eae4d462dd3ee9cb14f603b9086e81b6701aab56da5b635b22db1e758ed0a983e562
- SSDEEP 768:/k+Ea6rfMkAYY0J/MpIGQUG5YiSyvHAMxkEJ5YSv:8tfHY0JEpIGQU87SyPx/Y+
- TLSH T103E28E93AA546C9AC833C57194D35E35F970BA53470087EF2318C29D1F323837ABA76A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_socket.pyd
- Size 81KB
- SHA256 b38e66e6ee413e5955ef03d619cadd40fca8be035b43093d2342b6f3739e883e
- MD5 899380b2d48df53414b974e11bb711e3
- SHA1 f1d11f7e970a7cd476e739243f8f197fcb3ad590
- SHA512 7426ca5e7a404b9628e2966dae544f3e8310c697145567b361825dc0b5c6cd87f2caf567def8cd19e73d68643f2f38c08ff4ff0bb0a459c853f241b8fdf40024
- SSDEEP 1536:ZUuhzLx79flWrqcqtpjly+uCo9/s+S+pzcHQ6B48/VI9dsSbxntpIGLwIU7SyZxL:ZU6zLRNawRy+uCo9/sT+pzuXxVIbsSde
- TLSH T179834911A69050F9DBB3C17AC6635F23FB74B4C01390A39F1196C66A1F33782BE79A91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\_wmi.pyd
- Size 35KB
- SHA256 79adca5037d9145309d3bd19f7a26f7bb7da716ee86e01073c6f2a9681e33dad
- MD5 ee33f4c8d17d17ad62925e85097b0109
- SHA1 8c4a03531cf3dbfe6f378fdab9699d51e7888796
- SHA512 60b0705a371ad2985db54a91f0e904eea502108663ea3c3fb18ed54671be1932f4f03e8e3fd687a857a5e3500545377b036276c69e821a7d6116b327f5b3d5c1
- SSDEEP 768:PgMwnWGwMtUTA7LlVIGCilx5YiSyvzAMxkEaFy:PgMwWGJtGA7LlVIGCih7Syrx+g
- TLSH T1F5F26D66E3641845DD27C67998E64E2BF971B6569B10C3CF3314825E0F323C1B9BA3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\base_library.zip
- Size 1.6MB
- SHA256 921775b6ee42b293e2dc58732454bffd29c7440f3170e21a460778aaa0924e7d
- MD5 cba454775530d201561845bf2c4d1efc
- SHA1 a76b07a59d8a446b03c09d74bf67827f885da3c6
- SHA512 f60f358736eca6f324675a8c65a87b0af2aeeb748d911d9a23ece21fdc5f6c82cd5f5bb4d3280c4dd41db1e6f2abb4f79cdbe6e68244867944eb271b03c34a25
- SSDEEP 24576:uttcY+PnCiCAqYtnq7dYuPjdIkXKbB3EaYchw:ytcY+PnPtQIkabB3sz
- TLSH T1D375E781BA92E5B3FC84F3BA04260A0EE3658571BB45C747389FC1A46F8F6E49D914DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\libcrypto-3.dll
- Size 1.2MB
- SHA256 4b0707d6695c639c8b24b519fe3b9f7f559e2c230d976c2faa50dccd3568fae9
- MD5 2a259ac129938f97318e4ae66ee85f8f
- SHA1 f50d47f91fd17f8c52501347fafafde3ec2001ab
- SHA512 8de37d1a63772f52c63b62ffcf661d1c5d66f17bbc70a4247276521a1a28c8b002be5738a1c519171d6d648fdf0b3b04ec99f4dcacb132ac462231921f966edf
- SSDEEP 24576:JTKuk2IPAVIH06iyN3OjPW84DYYgLEX3+9sNYOAcEKR:JTKuk2IIIU6iw3OjPWRrMsNYxBw
- TLSH T14F55AE7D91E800DCE1BBC67CE5564613E6F2B06A53B09ADB10B18AB90F67ED0523EF41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\pyscreeze-1.0.1.dist-info\INSTALLER
- Size 4B
- SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
- MD5 365c9bfeb7d89244f2ce01c1de44cb85
- SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
- SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\python3.dll
- Size 66KB
- SHA256 1e9224ba7190b6301ef47befa8e383d0c55700255d04a36f7dac88ea9573f2fb
- MD5 77896345d4e1c406eeff011f7a920873
- SHA1 ee8cdd531418cfd05c1a6792382d895ac347216f
- SHA512 3e98b1b605d70244b42a13a219f9e124944da199a88ad4302308c801685b0c45a037a76ded319d08dbf55639591404665befe2091f0f4206a9472fee58d55c22
- SSDEEP 768:3V1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/J:3DmF61JFn+/OipIGL0m7Sy0xG
- TLSH T173637112BB54F8A3DBFA66FC39D199CD542B12CC872584ECA57893D30E1A310A6E734D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\python312.dll
- Size 2.2MB
- SHA256 81c022eb5ef7ba6d75094af21fd55d3b3b77dc0b34163a67c84c646dcfd14a44
- MD5 ce9268b33c483ada9147b4caa1c15e7b
- SHA1 3014acce450f2a3213e3cee034b067e99ac4c28e
- SHA512 c383bc19bf27da1ad7dd527bf318416d3117bcc1794768c74767ecd82ca72066241a0eb02602ca0da8b8c453316251bb127652f049284a4e72281b572fbc5775
- SSDEEP 49152:Uit0mhL3kezRzRaIa7dsmtY1gBmHJISS0BXEXjMUPJph+GMg4bK1ZYr:B6vwRS7fYzmSSVlLWJ
- TLSH T139B58D5763B810E8D6BBA1A1CD16C25BCAF2B8571774934F02B04E5A2FB3E93224F715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\python312.dll
- Size 1.8MB
- SHA256 f769a893a56a29dc054ce246ed29037cb436a37b44d51e5067de2fe033fe1288
- MD5 17f61f275409600dce0024d2de121958
- SHA1 24692fad494baaa277c48fbe52f9f5bf769eed72
- SHA512 057d524a2806a83595f74d04a00233f1c066647784521f48c084e6c3e61359e4eaebc7adf1189f4a83dbbafe4eaf753b23d060f2627454914bbec2399c4dc597
- SSDEEP 49152:Uit0mhL3kezRzRaIa7dsmtY1gBmHJISS0BXEXjMUPJphL:B6vwRS7fYzmSSVl9
- TLSH T181958D5A53A820E8D6BBD195CD16964BCBF278571770938F02F04F962FB7AA3221F311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\select.pyd
- Size 30KB
- SHA256 bc71fbdfd1441d62dd86d33ff41b35dc3cc34875f625d885c58c8dc000064dab
- MD5 bffff83a000baf559f3eb2b599a1b7e8
- SHA1 7f9238bda6d0c7cc5399c6b6ab3b42d21053f467
- SHA512 3c0ba0cf356a727066ae0d0d6523440a882aafb3ebdf70117993effd61395deebf179948f8c7f5222d59d1ed748c71d9d53782e16bd2f2eccc296f2f8b4fc948
- SSDEEP 768:s7ENJKHq1vv38pIGQGE5YiSyvTcAMxkEMrX:s7ENJKK1vv38pIGQGO7Syb6xuX
- TLSH T13ED29E97AF601845D823C972A9E74E26ED32B6A7475083CB3368C15C1F227C277BB764
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\ucrtbase.dll
- Size 896KB
- SHA256 d0fc5499bdff22bc11f78dd24438dedd52b99785f2a4394f0adf7efd38611544
- MD5 8c86f7d5ef423c86edf10f071e3f24ac
- SHA1 1429f351edd52b567593d392505a44352e78bb66
- SHA512 e1afb40d3b336789ee359e8a7da43f15a4d5cf997ebf178fd82505f5f299077c0a673462f6ea09ce06c14d3ef9dc2e298a5b3e54cf0d6c66770f652455db8d9c
- SSDEEP 12288:MIrPkfsivcH32BrB3ZQbXQJsRs8eYU52TrqjS9HKESRYQKio8AcobMsM:CJG2BrB3ZQAq0AT2jS9HKHdK6AccMsM
- TLSH T19D159C6877AC00A9D97BA139C427640BF6B37811477497CF03B24AF64E2BBE5123B361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31642\ucrtbase.dll
- Size 1.1MB
- SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
- MD5 3b337c2d41069b0a1e43e30f891c3813
- SHA1 ebee2827b5cb153cbbb51c9718da1549fa80fc5c
- SHA512 fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499
- SSDEEP 24576:CJG2BrB3ZQAq0AT2jS9HKHdK6AccMs1wmxvSZX0ypFi:0VGrT6SAk3ei
- TLSH T1EC359D64B76C02A9C97BE13DC927554AFA73380147709ACB03E74AB93E2B7E552B7310
- MD5 SHA1 SHA512 SSDEEP TLSH