Analysis
- max time kernel
0s - max time network
3s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 17:17
Behavioral task
behavioral1
Sample
SpiritX_tools.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpiritX_tools.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
spiritx_crack.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
spiritx_crack.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target SpiritX_tools.exe
- Size 12.6MB
- Sample260804-vt49zseb95
- SHA256 086809caa3f9a5d76d68053395bf6cfd725fb26da61c85cbc963337a2a095c88
- MD5 48641b69500502d2c887b4d132f610b6
- SHA1 db42f0b03f6705a55fe2871c5bf911d038952225
- SHA512 65c0523062784feb24b73ded7eb0e2a82f1a794760154a8bd81da46384cd009013c8aefce0fac3d41c2f307e6454baeef30ce26242a99ad3042eddc27611bc68
- SSDEEP 393216:RDMgIfUKOcR1idq1B7/zCQsHsoqybpin:O58KPR1ig1dzGnnbp
- TLSH T1F8D6335C92E109B2F4ABA23D06A64557C1B171145712CEEF07E1836A2E9B3F34E36BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\VCRUNTIME140.dll
- Size 64KB
- SHA256 1bce17e3fde2e0083667bd16349fa7dc72fd7a6f4140ec7909be3e45b52c2a89
- MD5 6eca1de1cf945e3f8dd4957e2706e050
- SHA1 fbe00cd81c10c170623322c32655cdae88800589
- SHA512 50a0e0161d99e3ec17ae591e3e4bcc224f6aecaca0131f650b28c3ec209419ce69d0fc5fae6bd342f540c4706be08fada3ef6b71f1a4fcb7f2ea188e7e930843
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyo:ZEnsvReGsWyxLiP
- TLSH T100535C4952E103FAD17AD179C5E32A1AE6B1B80487B1A6DF03B509B60F23FF1653D386
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\_ssl.pyd
- Size 14KB
- SHA256 df7e826ed147bc9457463aa9e13b6e7844ebea66657ec4bd36025e54a7c2ba86
- MD5 2269e0defdd9048d88c739927cfa98b4
- SHA1 10ff321c71439527f52a37c52b47dd2d494156e8
- SHA512 5379fadca19195287268f959b204bc9be8b30e751789f47e1fe7194310c31a10d7e508e76c1f8364b490a4c6c420ff2fb56ec676c54067814f6d1885dc75b398
- SSDEEP 384:lwmOAsIc5ZSIxgcGnZYeTUKMML/Ox4JMrotGW17Bs0P:loIc57lGnZYCLm6CWxBX
- TLSH T10E62B45A7A8450F5EF62D079CF521927E975B4D12AD0638F0323C6699F321E73E36B20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\_zstd.pyd
- Size 14KB
- SHA256 39a2b514efb28c81bd8af9192a1bd4ea97b5e5c5123f4f979a11f67e012f7781
- MD5 3166a7ca851032fcb4479d41c27d6b56
- SHA1 d12a0da75ee55d718991d2e74b6ab0e41a0903bb
- SHA512 fa79983113f14d1034a2012137ab9ce206958fc892a851fb1a1f25167e3a741cfc701f2a454c802caa8d29d3ef063aee631cbcd94d84c71a26dead918a4cd825
- SSDEEP 384:Ag1l4mzP93iWces0YJLJG2T3AKRI2MGBLTClo:/SaM/es0YJLJG2JRXMGBHClo
- TLSH T1EA62099A77A450E8DBAFC179CD436819F7B1F4606340934B52B296662B372D12F7FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\base_library.zip
- Size 64KB
- SHA256 e04b8673adc33f98c1f2d82ee7c562c858042a302ef7ca2c57b5c0a0b08e81a4
- MD5 8e6b8a1996e8007468f8c3106c8d8fe8
- SHA1 3f9a07a742ccdfb8e887b3501d4c3ff0d5524b5f
- SHA512 22cde26de7211c6c7496eda560a8b7323a5d3d27c2582373de478f6b2a396f2e2cc8f7ca8ed5934c82aa919f7ffe5dc6f1e1e3977adcf13937c133a0c5282ad8
- SSDEEP 1536:nn7ZnOJAQ3ARJ8t7qDqHT7rIm5F49qdzVtZ7am/Zm:7oJ/as1TfImfdz5zZm
- TLSH T19A53F968BA81487BF8DBF17835DB6949F733C0159305C743603E482FAE2EB54D96A68C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\python314.dll
- Size 320KB
- SHA256 0aee8b2d7e9a6910452f2c29fc3adf0b2829a33e69c3cece7bffad5e9421c5af
- MD5 3f8af4da9d4b205a4c3720cf68034d82
- SHA1 aa2d4e08c47a28f846084faefadb88d994281b97
- SHA512 b31981b92ed215a225c2abc534fa208843e4b3f510e5366812e76c4e50a5b48238094ad135590d98a0b8891896643f505562d151abd6aa2e4a96c9f08d1f9065
- SSDEEP 6144:0/lw7xiiwX3oWnLYg1Af3MPdIwksSY5I7zf9tdTW9FYQXDe:E67xivvJ1c3MPdnVFO9tdTWNy
- TLSH T1A1647D49D3E810E8D9ABC1789A55D05BCBB1BC16762087CB43E08E971FB76A33B1E315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\python314.dll
- Size 256KB
- SHA256 1b86472d3a1d4c67c92e0de84188bf05553b6324caeb4032b5e64f721161dd73
- MD5 72ec455fce46b5026d7e4debb1922100
- SHA1 6f6f54b015435f907f440ff97fccbb8fee885db1
- SHA512 a2878fa071be6a3d0f86b2924470145bc4cf9d256eff05b96f1f0ea647acbe6b8eed29057e588b2460ee724a806d461ff31798480a194bbd1461d4c87a5b5382
- SSDEEP 6144:0/lw7xiiwX3oWnLYg1Af3MPdIwksSY5I7zf9tdz:E67xivvJ1c3MPdnVFO9tdz
- TLSH T151447E8993B810E8D86BC278DA55D04BC7B1BC167660D78B43E08E9B1F776633B1E319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\ucrtbase.dll
- Size 640KB
- SHA256 50ed60111d3cd54715d0331ce192f453206672b3244732e0514e3471d7fe512a
- MD5 e009718e577f458e1c713926c5a5ebb0
- SHA1 6923c9eb15583adda2180a5d29fbb6aafeaac472
- SHA512 c1619a0e8453b56926b02635cf48851ff6781b236d06064e12b10ee1fa9c1752e51ab9bb10c94634336683970db8af87d8407b30e3098d1475a938801942eb93
- SSDEEP 12288:c2bPuhXo9mJAnmfWg4LMGIZd3KRxmOUAZMMNX9NOOp6d:cQPuhXCFmugCw3wUAZMMNX6sm
- TLSH T131D49E6662AD10E8C47BA135C64E9657DA73B81603349BCB03F04AB52B37EE5177F322
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI15722\ucrtbase.dll
- Size 320KB
- SHA256 0d83e0ab21e72d03b090ce09cff8aff8618cc19e9784edbc5e8aa8804a007bf9
- MD5 2d5d05e12a430834f0185b43f6c7cb7b
- SHA1 829502684c568eb044bdc3c532125b2d7d4ea05d
- SHA512 156d5f5432c3b77102745f96223bb8f76ac6d08c8e1a524905fc10f3a1bb3258478313921deb35392371ef35ea77ebe1ee902a45bcc01e6447d28dfb594fecd2
- SSDEEP 6144:cJMH7CMuiU2MtHd/HANqVOm/K/O5AIom9RNmXTx+vCXgiQ:c2bPuhXo9mJAnmfWgF
- TLSH T1F9649E6662A810FCC46A9135D94E5663DB73B82A03349BDB03E04EB52B37ED1177F362
- MD5 SHA1 SHA512 SSDEEP TLSH