Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 06:36
General
- Target 703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe
- Size 6.3MB
- Sample260730-hdem6sel41
- SHA256 703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7
Malware Config
Signatures
- Loads dropped DLL 10 IoCs
- UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"C:\Users\Admin\AppData\Local\Temp\703ed1f1729469e3c99784e03f4b5cdba7d1f6e3a0819e0416e7571ececb95f7.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_decimal.pyd
_hashlib.pyd
_lzma.pyd
_socket.pyd
_ssl.pyd
base_library.zip
libcrypto-3.dll
libssl-3.dll
python311.dll
select.pyd
unicodedata.pyd
memory/4732-32-0x00007FFDFDAD0000-0x00007FFDFDAFD000-memory.dmp
memory/4732-43-0x00007FFDFB910000-0x00007FFDFB943000-memory.dmp
memory/4732-31-0x00007FFE01260000-0x00007FFE01279000-memory.dmp
memory/4732-34-0x00007FFDFDAB0000-0x00007FFDFDAC4000-memory.dmp
memory/4732-36-0x00007FFDE7CB0000-0x00007FFDE81D9000-memory.dmp
memory/4732-38-0x00007FFDFCA70000-0x00007FFDFCA89000-memory.dmp
memory/4732-40-0x00007FFE03130000-0x00007FFE0313D000-memory.dmp
memory/4732-17-0x00007FFDE8DA0000-0x00007FFDE9392000-memory.dmp
memory/4732-42-0x00007FFDE8DA0000-0x00007FFDE9392000-memory.dmp
memory/4732-45-0x00007FFDFB6D0000-0x00007FFDFB79D000-memory.dmp
memory/4732-46-0x00007FFDFDAB0000-0x00007FFDFDAC4000-memory.dmp
memory/4732-47-0x00007FFDE7CB0000-0x00007FFDE81D9000-memory.dmp
memory/4732-48-0x00007FFDFCA70000-0x00007FFDFCA89000-memory.dmp
memory/4732-56-0x00007FFDFB910000-0x00007FFDFB943000-memory.dmp
memory/4732-49-0x00007FFDE8DA0000-0x00007FFDE9392000-memory.dmp