Overview

overview

7

Static

static

3

ddosnode.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/08/2026, 18:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ddosnode.exe
  • Size 15.3MB
  • Sample260802-ww7cssdr6y
  • SHA256 440dd81e8fcd37bbd7ca6831b9efbafd35656ca5c61bf53255d273ac33cd76bb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 32 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddosnode.exe
    "C:\Users\Admin\AppData\Local\Temp\ddosnode.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Users\Admin\AppData\Local\Temp\ddosnode.exe
      "C:\Users\Admin\AppData\Local\Temp\ddosnode.exe"
      2⤵
      • Loads dropped DLL
      PID:1812

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\_bz2.pyd
        • Size 85KB
        • SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\_ctypes.pyd
        • Size 139KB
        • SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\_lzma.pyd
        • Size 157KB
        • SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\_zstd.pyd
        • Size 491KB
        • SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
        • Size 218KB
        • SHA256 3048af5864e17f79410273b3074416d67473eae22b3d7d1b7b58f24a506f82ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 1c1fa14856f9a788d13fd5271e6aa5cf9cdf2504e991281cfb46fa66ecd289fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 7e9ba903118962ddffb2d5a776a4fe4e6cf6280c352ec9c20142834beaf37c1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 3fc29cf8ce933ffd81117486e46f7051af7fcb382b3fdd465a6b7ecdcc9eb13b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 a307f078f7a087c451e2154975e9862df644855fa3c2e926bdd6c41f8d91983b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 ecaa9e40c7a3739267bc622305e7539dd295c80d48069f3df37fbeea0a94db0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 7b00d9ed629aa38c9b3036eeda98747745da66572d03ea3c2cb05bbe4182c800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 49062ecd65e7eb7a663c299e099c9d7e0cbb71741f83d0c21293222dcfe00be5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-file-l2-1-0.dll
        • Size 21KB
        • SHA256 2f35b83277701f4a87be01de1092e0e1d142ad7272960a9d81f7cfa480b16ef0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 a44fd95a504f979ebff39c625a3acc2adc94b49121bc0fef611d1704d41ba924
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 c92c9c7ad5aca3458edca0b100b3e7cb3dc55147d6eb1c5ea4ad323b56599487
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 6b3d5bdb5583dca77880cc110080b9886603441ceb3335b5265d268104fa38fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 8f6a540e12e3f3f7dffe1b0aa71da5a64e6537a6583c4464b55776df7e7872c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 bc397bb25e67f4e13ca12db28b5433b234a126546f8618cd37a877bc26c2fa47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 76a2f29414ab02a892fbf0cb629e2a32093bba082aebadae08e09c2a86b8d2b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 3c5f47eab3b590afa841d6193072b0a8339c6e2feffa3e80179ea7e821b84de4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 782dd7359bc502c05596fc45350382552a20ce26767581ace9deed62d6c00802
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 4bda1b9dac5c675378b011301228183b6ef9415188a4758cdd3e4f1da2bb1b24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 d79709e882a89558206f8eba2b0476fc96d4e8e6e9b77607a4ce65c41fa485d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 90b69295b5f98342caf0ed7bebf2c165f7fc622a42200d7414edfb3621948167
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 5f7961c4a4b03bec2865a3b5f7a512a0d8fb979ff14fa86f94a99f33733da88a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 1909c75bc1e52305466db78967526787842788a5bfbd4ec7749ec2fc111632c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 ec8416b08d4a2931272c2177629a3162f49780f87c9e94fa9256d43b456e0f22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 bdcf65b7b26f7a7cdc51245871f80ecbe8c5ab448df3bf6187ca03d451d46f7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 57a70ffd59b588c882ca35d92c9894d04daa40bd7229fd10fa2b1155784971ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 90c6284ce641e9b7c900164f60831829762eb827b930d1107199165002a2db86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 284ec120b200d7c300ad562287322f4c3aa8c5ba42d05dd50a200555ab9e7ffc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 90a8b4a15899227a85f036abdd49538c2b2d93cc50fce1f331afa0e34739ceb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 f95a4f9df0731f5085d9ef1db350e10087c5c78fb682d8cce116ac1204fafb92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 bb01468c87a1435378f6ac1dbc2c073c09ca28776d4b240aa9fc582b8b382d64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 32dbb3f0723c3fb53e7137fb2fd77323b9a1b23b16c31b175952fa845d70cb16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 1b084138257842a5166b12e65ac4c87c8c0c79e919ab7a916a98f4fd86df7058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 0a7bec989ab0970100ee4595cb301e50ebe368ab0bd0698fa10d951511c8aba8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 d0060dd24cc22bcb7adc362bfac618f3ec6bfad21bf1e7d73046d16f6129989a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 ccac567838a83301b4debfd58f5fe2676fe0962b39ca30adb5c35e0a0435aed8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 26766b83735f6f20930c963b318959c7350b6a3074fa4b95d143f60d6fb73d45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 918d5eb9f358038bc819c05bfea7fd114c2a53a35dff43c9956cf13cf1dfe99c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 0504f7fa1c62ffbbbe5e02cd6ed2530b97ee5a183ba87d98546293c5c1920b1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 2e8f5fb597da40d184e1568e18356c84c194ac1588c00c8b55ebb5d669cad5bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 6f638548cdd01e2e4a8994f04ce3a01e1a42e2a6cfa71faba587e0f2f0f701ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\base_library.zip
        • Size 1.3MB
        • SHA256 55a866ef7e2f91cd51aef8eacd8980238592d8882b3bdf922f77be55c57a738d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\libcrypto-3.dll
        • Size 6.0MB
        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\libssl-3.dll
        • Size 1.3MB
        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\pyexpat.pyd
        • Size 217KB
        • SHA256 133942bde91fe43289076a0b50a01b265df4ead078617cca6f6604a4166e1260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\python3.dll
        • Size 72KB
        • SHA256 22c6e46d8bd563cdb072650901461ef68be2ea6cb1e80af859559d9395a27e39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\python314.dll
        • Size 6.5MB
        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\select.pyd
        • Size 32KB
        • SHA256 fab1b4cee101359d82d72061b83cff1855337b3677b9fe01cd69f7548f4c496e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16762\ucrtbase.dll
        • Size 1.1MB
        • SHA256 10c5380e432dd3b8829094783943bb7b42e4d865a2d02c4127d9ba03f9759947
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download