Overview

overview

7

Static

static

3

ck.exe

windows10-2004-x64

7

ck.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/08/2026, 00:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ck.exe
  • Size 10.4MB
  • Sample260801-ayws7aba48
  • SHA256 999421686197b840e40886fadddfa41fda72c2789879c4518f0877f8c4de5503
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ck.exe
    "C:\Users\Admin\AppData\Local\Temp\ck.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2940
    • C:\Users\Admin\AppData\Local\Temp\ck.exe
      "C:\Users\Admin\AppData\Local\Temp\ck.exe"
      2⤵
      • Loads dropped DLL
      PID:3332

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\VCRUNTIME140.dll
        • Size 95KB
        • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_asyncio.pyd
        • Size 60KB
        • SHA256 2c9f565254e4b2744d52b58f4960d5da1330c7846059b772044e4415804d933e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_bz2.pyd
        • Size 78KB
        • SHA256 31dd9bfb64b1bee8faf925296028e2af907e6d933a83ddc570ebc82d11c43cfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.cp310-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_cffi_backend.cp310-win_amd64.pyd
        • Size 175KB
        • SHA256 ecdfb16024e62535537364276bf5028fd0562ca065862518dab7b569b6c220a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_ctypes.pyd
        • Size 117KB
        • SHA256 b545db2339ae74c523363b38835e8324799720f744c64e7142ddd48e4b619b68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_decimal.pyd
        • Size 242KB
        • SHA256 4f1ecc777c30df39cd70600cd0c9dc411adb622af86287b612f78be2a23b352c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_hashlib.pyd
        • Size 60KB
        • SHA256 9da79abfed52c7432a25a513f14134f3782c73ec7142e2d90223610eaef54303
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_lzma.pyd
        • Size 151KB
        • SHA256 75d450e973cd1ccbd0f9a35ba0d7e6d644125eb311cc432bb424a299d9a52ee0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_multiprocessing.pyd
        • Size 30KB
        • SHA256 b2d81c59e7ba45ce85f557c67a02ebbb01433136b6dd5075afcf115f57b73115
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_overlapped.pyd
        • Size 45KB
        • SHA256 622171218fab2952c569acdbf0489d0098fa0664f61624d1c4f040410731be41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_queue.pyd
        • Size 27KB
        • SHA256 827a07b27121200ed9fb2e9efd13ccbf57ca7d32d9d9d1619f1c303fb4d607b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_socket.pyd
        • Size 74KB
        • SHA256 9558dda6a3f6ad0c3091d643e2d3bf5bf20535904f691d2bdb2ce78edf46c2da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\_ssl.pyd
        • Size 153KB
        • SHA256 41278e309382c79356c1a4daf6dbb5819441d0c6e64981d031cda077bb6f1f79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ada92cb5d92a588d1b93__mypyc.cp310-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\ada92cb5d92a588d1b93__mypyc.cp310-win_amd64.pyd
        • Size 218KB
        • SHA256 df449f6b7397e3a83f84d08ff38efac2c45527944221d1d6f6e78228a05c8ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\base_library.zip
        • Size 859KB
        • SHA256 f26dc53721e93da9997b6d517d2a5ee951a0778f5f660d71c034fca8ed13758b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\libssl-1_1.dll
        • Size 682KB
        • SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\pyexpat.pyd
        • Size 191KB
        • SHA256 e41cff213307b232e745d9065d057bcf36508f3a7150c877359800f2c5f97cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\python3.DLL
        • Size 61KB
        • SHA256 a1c5c6e4873aa53d75b35c512c1cbadf39315deeec21a3ada72b324551f1f769
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\python310.dll
        • Size 4.2MB
        • SHA256 5783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\select.pyd
        • Size 26KB
        • SHA256 149427a8d58373351955ee01a1d35b5ab7e4c6ac1a312daa9ba8c72b7e5ac8a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI29402\unicodedata.pyd
        • Size 1.1MB
        • SHA256 0f27f26d1faa4f76d4b9d79ad572a3d4f3bbe8020e2208d2f3b9046e815b578a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download