Overview

overview

7

Static

static

3

Island Spoofer.exe

windows10-2004-x64

7

Island Spoofer.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    3s
  • max time network
    25s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/07/2026, 06:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Island Spoofer.exe
  • Size 94.7MB
  • Sample260729-gvgnesyscx
  • SHA256 7290003003f7ec387873c51ed2a01edd791555b1e87758560363a4bd1ca42716
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
    discovery
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Island Spoofer.exe
    "C:\Users\Admin\AppData\Local\Temp\Island Spoofer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3516
    • C:\Users\Admin\AppData\Local\Temp\Island Spoofer.exe
      "C:\Users\Admin\AppData\Local\Temp\Island Spoofer.exe"
      2⤵
      • Loads dropped DLL
      PID:2692
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "tasklist /FI "IMAGENAME eq AMIDEWINx64.EXE""
        3⤵
        • Executes a command shell one-liner
        PID:5540
        • C:\Windows\system32\tasklist.exe
          tasklist /FI "IMAGENAME eq AMIDEWINx64.EXE"
          4⤵
          • Enumerates processes with tasklist
          PID:1328

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtCore.pyd
        • Size 2.6MB
        • SHA256 73fbd65ba4464d4cf383617608cfeb9c1480fee29d3234c8500d97766ac9beb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtCore.pyd
        • Size 2.9MB
        • SHA256 d13bdad9d6c506513582d96696e15a0ad2dd10c609443cad75cde996fd6846f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtGui.pyd
        • Size 2.6MB
        • SHA256 96f0f3e26cc2eef0a2427a77bf83f2da01b4a212d57f39f675ea7106a628ab1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtGui.pyd
        • Size 2.8MB
        • SHA256 3c8c80ff41efe5e664d8b007399d1cbdf42eddd009851decd6ffe3a6b1df9f00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtMultimedia.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtMultimedia.pyd
        • Size 558KB
        • SHA256 1be5cdd4670b8dfb2ed86ffee7c4bd252677951698e175ac7aa2f61d444f69b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtNetwork.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtNetwork.pyd
        • Size 983KB
        • SHA256 3953a86c9545ad8fa1cf1dec27085dd357838464cd6e2131c9963caad6234b67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtWidgets.pyd
        • Size 2.6MB
        • SHA256 5fb094db58d4ee1344673fc3710354468166895adf4779007861c8432947d2c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\PySide6\QtWidgets.pyd
        • Size 2.4MB
        • SHA256 c5f7b1baa43259e438891e7133e6042610fea236535bbc09763cd678787fccff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\Qt6Core.dll
        • Size 2.5MB
        • SHA256 c12cee3716e8bc16a36750b3bcd758aad8f192dcf63a1f2ce2ab202a14544c34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\Qt6Gui.dll
        • Size 2.1MB
        • SHA256 385542664b7e45eba3a8ea200a12a7e6e562324bded92faa5b1f3c39f5267720
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Multimedia.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\Qt6Multimedia.dll
        • Size 1.2MB
        • SHA256 dc32f2cbb90e42d4daa3215f24fb42f5396911379d7f10e89df8cf14a765760a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\Qt6Widgets.dll
        • Size 2.6MB
        • SHA256 5cf324b2f634ef2f677f8ba765c1950e2f20c4bdbedb04e2d51fb30b02e7e9e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VERSION_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\VERSION_1.dll
        • Size 7.0MB
        • SHA256 9610892a808bb44697133387d97e4e1eac6b0b87b4eed604bd8dc9982520cc12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VERSION_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\VERSION_1.dll
        • Size 4.9MB
        • SHA256 102af3b8c08d68b9cd8858f9053219ea94b40e071f688e7bf135558ff2aad5bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_bz2.pyd
        • Size 86KB
        • SHA256 ef5277eb670219274e7d1e92190ddf7f4bb94d4922ca1c1a12efadfd2c4c66f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_ctypes.pyd
        • Size 139KB
        • SHA256 fd4847b99cd504a66bdc4739f15181b562774e6736bb88775880b073276dede1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_hashlib.pyd
        • Size 67KB
        • SHA256 9bc6ffcd2ab4ac87c4035f18b432e888d0d4a36795c97bf3f28ddf32cc34e40f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_lzma.pyd
        • Size 157KB
        • SHA256 39e5bc3624a26c9f6ad2e2df412543b0bd697a1d75338b44fe99763358d6d8cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_uuid.pyd
        • Size 27KB
        • SHA256 635d6c46bbf6b86dd30a802bd1c6e214dabccb44d1452c52f0b557ae5bcc6f68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\_zstd.pyd
        • Size 491KB
        • SHA256 54e6acfbc1cb27c9afea0e133cadac68b89869ff1a14eb0c678d40eb9c655347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        amifldrv64.sys
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\amifldrv64.sys
        • Size 29KB
        • SHA256 65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        amigendrv64.sys
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\amigendrv64.sys
        • Size 35KB
        • SHA256 b9e8de155fb9aabb4760034a65855130eb85aadc88963e40e2be87b049c025bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        islandcleaner.exe
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\islandcleaner.exe
        • Size 2.5MB
        • SHA256 2a5ccc562211ec145b2d7f5c34baff7189b4d3a869512dadea13575882a5188b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\libcrypto-3.dll
        • Size 3.5MB
        • SHA256 8a8c68603133260a75eef71559db5f6aa6b9f939ec8778806c44aa17481d27d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\libcrypto-3.dll
        • Size 3.1MB
        • SHA256 c86fdc9a6d9501e254dd968798e62b51c65fd549c1e3891152d5c4b50ca6c652
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyside6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\pyside6.abi3.dll
        • Size 242KB
        • SHA256 d4072be872b31f3748de5e6c28cb2976dafbf063d3ccfa38e5dabda29babcdaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\python3.dll
        • Size 72KB
        • SHA256 f3d0cd260a46a9617a8b1d4d5e8703278478c22a910165bffb4e4ddf6562d93f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\python314.dll
        • Size 4.4MB
        • SHA256 ceaf2024e4d3ea02eb7a7d4c66db2bb86f8aad53207dfe237566482249707ba4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\python314.dll
        • Size 4.0MB
        • SHA256 c293d3058229a5e431edc07239a0dd9d56bf1aad5cb7c53f609dc961bff8f1a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6core.dll
        • Size 2.4MB
        • SHA256 2dd23358903b0ddb6095e3429ac4c8a6fd12632012e0f2a7b5d49c68d1bbb3ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6core.dll
        • Size 2.0MB
        • SHA256 d62d069ae0194416fdf1e98eb5b0f8973ecaba429f1e0ec08c205685ed75dde9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6gui.dll
        • Size 2.6MB
        • SHA256 860d9901e539e4967615e2615e8574add8e92ecb4082270df178a6506332509d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6gui.dll
        • Size 2.2MB
        • SHA256 53a63d415baed1999c958787a334ef5bb47950d682a0d0c3e33404bc3a8dbcde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6network.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6network.dll
        • Size 1.7MB
        • SHA256 dfd0dd852274a5fe9b3c7d2dd9fffe7e2117d28c10fc862174d6675d42395177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qt6widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\qt6widgets.dll
        • Size 2.5MB
        • SHA256 bd554f9293a1234ec6792433d35d0d72e9edc96c6bdc29089b8888023e904364
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shiboken6.abi3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\shiboken6.abi3.dll
        • Size 375KB
        • SHA256 47f4f9b44c95037565dd14f4be04f350f20c53c05483b750e0be867c39a7441e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\shiboken6\MSVCP140.dll
        • Size 536KB
        • SHA256 005f2324c7ff79bbe9a44992b0708abb4c871bd24bcc7a34aca5eab4439c1f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Shiboken.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\shiboken6\Shiboken.pyd
        • Size 32KB
        • SHA256 0e2c5318c5ac60a016a12230bbb1f6a9d990c45cbf4a7c4af24aefb5ab7dc40a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\shiboken6\msvcp140_1.dll
        • Size 26KB
        • SHA256 d878d7cb27187247a3ce1adfdf1f9b7b703e4429bc55f3e95284a43e80c10151
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3516_100824_wjIHALncbPM\shiboken6\msvcp140_2.dll
        • Size 265KB
        • SHA256 c0ab58670a2cebaad8e7ef1f57d8f684a43bdf1c39d20a032088425905802655
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2692-121-0x00007FFD34B60000-0x00007FFD351AD000-memory.dmp
        Download

        memory/2692-127-0x00007FFD33E60000-0x00007FFD3421B000-memory.dmp
        Download

        memory/2692-111-0x00007FFD36080000-0x00007FFD363B3000-memory.dmp
        Download

        memory/2692-124-0x00007FFD351B0000-0x00007FFD35669000-memory.dmp
        Download

        memory/2692-139-0x00000170AADD0000-0x00000170AB06E000-memory.dmp
        Download