Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
30/07/2026, 06:36
General
- Target 703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe
- Size 6.3MB
- Sample260730-hdem6sel41
- SHA256 703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7
Malware Config
Signatures
- Loads dropped DLL 10 IoCs
- UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_decimal.pyd
_hashlib.pyd
_lzma.pyd
_socket.pyd
_ssl.pyd
base_library.zip
libcrypto-3.dll
libssl-3.dll
python311.dll
select.pyd
unicodedata.pyd
memory/4792-30-0x00007FFD23510000-0x00007FFD23529000-memory.dmp
memory/4792-45-0x00007FFD22720000-0x00007FFD22D12000-memory.dmp
memory/4792-17-0x00007FFD22720000-0x00007FFD22D12000-memory.dmp
memory/4792-34-0x00007FFD234B0000-0x00007FFD234C4000-memory.dmp
memory/4792-36-0x00007FFD15690000-0x00007FFD15BB9000-memory.dmp
memory/4792-39-0x00007FFD23070000-0x00007FFD23089000-memory.dmp
memory/4792-40-0x00007FFD28940000-0x00007FFD2894D000-memory.dmp
memory/4792-44-0x00007FFD22E70000-0x00007FFD22F3D000-memory.dmp
memory/4792-43-0x00007FFD22F40000-0x00007FFD22F73000-memory.dmp
memory/4792-32-0x00007FFD231C0000-0x00007FFD231ED000-memory.dmp
memory/4792-46-0x00007FFD231C0000-0x00007FFD231ED000-memory.dmp
memory/4792-47-0x00007FFD234B0000-0x00007FFD234C4000-memory.dmp
memory/4792-48-0x00007FFD15690000-0x00007FFD15BB9000-memory.dmp
memory/4792-49-0x00007FFD23070000-0x00007FFD23089000-memory.dmp
memory/4792-50-0x00007FFD22F40000-0x00007FFD22F73000-memory.dmp
memory/4792-51-0x00007FFD22720000-0x00007FFD22D12000-memory.dmp
memory/4792-60-0x00007FFD22E70000-0x00007FFD22F3D000-memory.dmp