Resubmissions

24/07/2026, 03:10

260724-dpafda1hkd7

24/07/2026, 02:26

260724-cxa67s1erf7

Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/07/2026, 03:10

General

  • Target
    mini.exe
  • Size 109.1MB
  • Sample260724-dpafda1hkd
  • SHA256 7d7cd36b377fd11da9ccf6186161e14e11b4818ba01e187cd1f860ad7caa8575
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mini.exe
    "C:\Users\Admin\AppData\Local\Temp\mini.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4116
    • C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\mini_ads.exe
      C:\Users\Admin\AppData\Local\Temp\mini.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3736
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:5796
      • C:\Windows\System32\Wbem\wmic.exe
        wmic csproduct get UUID
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1468

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\MSVCP140.dll
        • Size 628KB
        • SHA256 7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Gui.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5Gui.dll
        • Size 6.7MB
        • SHA256 5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Network.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5Network.dll
        • Size 1.3MB
        • SHA256 4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5PrintSupport.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5PrintSupport.dll
        • Size 309KB
        • SHA256 783d4f1feb8dc0bc00acb8c094d6c1ab39ac6b5858874e60dd3d45677af4307a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Qml.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5Qml.dll
        • Size 3.4MB
        • SHA256 30035484c81590976627f8face9507caa8581a7dc7630cccf6a8d6de65cab707
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Quick.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5Quick.dll
        • Size 4.0MB
        • SHA256 c81ad3c1111544064b1830c6f1aef3c1fd13b401546ab3b852d697c0f4d854b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5WebEngineWidgets.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5WebEngineWidgets.dll
        • Size 244KB
        • SHA256 2bd29d50306ac49f1df65c22e736a873f3021a0fb65f950271161a2609056e1f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Widgets.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\Qt5Widgets.dll
        • Size 5.2MB
        • SHA256 3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\VCRUNTIME140.dll
        • Size 96KB
        • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\_bz2.pyd
        • Size 81KB
        • SHA256 5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\_lzma.pyd
        • Size 154KB
        • SHA256 613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\msvcp140_1.dll
        • Size 34KB
        • SHA256 206c931bf90fdad8816de3b5e2ef80b2bcaa9406c89ecc05fe6fddffe251e982
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\python3.dll
        • Size 64KB
        • SHA256 4055d1b9e553b78c244143ab6b48151604003b39a9bf54879dee9175455c1281
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python311.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\python311.dll
        • Size 5.5MB
        • SHA256 a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt5qmlmodels.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\qt5qmlmodels.dll
        • Size 428KB
        • SHA256 51e4e5a5e91f78774c44f69b599fae4735277ef2918f7061778615cb5c4f6e81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt5quickwidgets.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\qt5quickwidgets.dll
        • Size 80KB
        • SHA256 d82e8df844ac7b1d0a71a897ce7c93ba8601bfee6413c8a1206b0b7cbf69d02f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\select.pyd
        • Size 28KB
        • SHA256 0046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qtdeclarative_en.qm

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\translations\qtdeclarative_en.qm
        • Size 16B
        • SHA256 9959b510b15d18937848ad13007e30459d2e993c67e564badbfc18f935695c85
        • MD5 SHA1 SHA512

        vcruntime140_1.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\1.4.0.0\vcruntime140_1.dll
        • Size 37KB
        • SHA256 1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtWebEngineWidgets.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\PyQt5\QtWebEngineWidgets.pyd
        • Size 225KB
        • SHA256 4e35e19baad74448cc0a25b00550b175954db51a9cb0e01336aa305e1bb6322e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt5Core.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\Qt5Core.dll
        • Size 5.7MB
        • SHA256 8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_ctypes.pyd
        • Size 120KB
        • SHA256 e662d2b35bb48c5f3432bde79c0d20313238af800968ba0faa6ea7e7e5ef4535
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_decimal.pyd
        • Size 245KB
        • SHA256 d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_hashlib.pyd
        • Size 62KB
        • SHA256 39bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_socket.pyd
        • Size 76KB
        • SHA256 39715ef8d043354f0ab15f62878530a38518fb6192bc48da6a098498e8d35769
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_ssl.pyd
        • Size 155KB
        • SHA256 cb42e8598e3fa53eeebf63f2af1730b9ec64614bda276ab2cd1f1c196b3d7e32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _uuid.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\_uuid.pyd
        • Size 23KB
        • SHA256 f7f57807c15c21c5aa9818edf3993d0b94aef8af5808e1ad86a98637fc499d44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\libffi-8.dll
        • Size 34KB
        • SHA256 128a583e821e52b595eb4b3dda17697d3ca456ee72945f7ecce48ededad0e93c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1.dll

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\libssl-1_1.dll
        • Size 686KB
        • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\unicodedata.pyd
        • Size 1.1MB
        • SHA256 ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        backend_c.pyd

        • Path C:\Users\Admin\AppData\Local\mini\mini_ads\140~1.0\zstandard\backend_c.pyd
        • Size 512KB
        • SHA256 35f7bfe8d1965fc33c090febd216a4ef5c3a8b22ce02a689226a3776cc295317
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3736-480-0x00007FFD89F20000-0x00007FFD8A318000-memory.dmp

        memory/3736-479-0x00007FFD8AFB0000-0x00007FFD8B4F1000-memory.dmp

        memory/3736-485-0x00000189A18C0000-0x00000189A19C0000-memory.dmp