Overview

overview

7

Static

static

3

Xbox Full ...03.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    66s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    06/08/2026, 10:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Xbox Full Capture Checker By CrackingTutorial03.exe
  • Size 36.6MB
  • Sample260806-m3a4hatvcs
  • SHA256 4bfb6cea2b5ced39a3c0b73b3330920e0986444cd3c53c7585a82055ee36cf87
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 30 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Xbox Full Capture Checker By CrackingTutorial03.exe
    "C:\Users\Admin\AppData\Local\Temp\Xbox Full Capture Checker By CrackingTutorial03.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5116
    • C:\Users\Admin\AppData\Local\Temp\Xbox Full Capture Checker By CrackingTutorial03.exe
      "C:\Users\Admin\AppData\Local\Temp\Xbox Full Capture Checker By CrackingTutorial03.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1564

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\MSVCP140.dll
        • Size 576KB
        • SHA256 88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\MSVCP140_1.dll
        • Size 30KB
        • SHA256 446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\Qt5Core.dll
        • Size 5.7MB
        • SHA256 8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\Qt5Gui.dll
        • Size 6.7MB
        • SHA256 5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\Qt5Widgets.dll
        • Size 5.2MB
        • SHA256 3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\bin\VCRUNTIME140_1.dll
        • Size 43KB
        • SHA256 1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\platforms\qminimal.dll
        • Size 824KB
        • SHA256 05d1e7364dd2a672df3ca44dd6fd85bed3d3dc239dcfe29bfb464f10b4daa628
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\platforms\qoffscreen.dll
        • Size 736KB
        • SHA256 54097626faae718a4bc8e436c85b4ded8f8fb7051b2b9563a29aee4ed5c32b7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwebgl.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\platforms\qwebgl.dll
        • Size 470KB
        • SHA256 9c3b2fa2383eeed92bb5810bdcf893ae30fa654a30b453ab2e49a95e1ccf1631
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\platforms\qwindows.dll
        • Size 1.4MB
        • SHA256 3333ba244c97264e3bd19db5953efa80a6e47aaced9d337ac3287ec718162b85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qxdgdesktopportal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\platformthemes\qxdgdesktopportal.dll
        • Size 66KB
        • SHA256 e23fbc1bec6ceedfa9fd305606a460d9cac5d43a66d19c0de36e27632fddd952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindowsvistastyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\Qt5\plugins\styles\qwindowsvistastyle.dll
        • Size 140KB
        • SHA256 d9b21182952682fe7ba63af1df24e23ace592c35b3f31eceef9f0eabeb5881b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\QtCore.pyd
        • Size 2.4MB
        • SHA256 d6e45fd8c3b3f93f52c4d1b6f9e3ee220454a73f80f65f3d70504bd55415ea37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\QtGui.pyd
        • Size 2.4MB
        • SHA256 a9408e3b15ff3030f0e9acb3429000d253d3bb7206f750091a7130325f6d0d72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\QtWidgets.pyd
        • Size 4.9MB
        • SHA256 a1e97a2ab434c6ae5e56491c60172e59cdcce42960734e8bdf5d851b79361071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\PyQt5\sip.cp313-win_amd64.pyd
        • Size 117KB
        • SHA256 e63580748533698abdafaff1210f5bb0247b36ee987d0180076eaaa46245c0d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_bz2.pyd
        • Size 84KB
        • SHA256 76a33e2baa3880aa46290cc7d5810b3155c5e2f5a1cc7d3f7b751f6434144ada
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_decimal.pyd
        • Size 279KB
        • SHA256 906964c01d04b360c316a2bb86d03d9ca9864e039baa01fa866815e6dce4a9b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_hashlib.pyd
        • Size 67KB
        • SHA256 5eb4a2aa9e28b49cb2a4f6ecee21f3c2b629b43a0709bad1d7e6204bac74eac2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_lzma.pyd
        • Size 155KB
        • SHA256 f221ed5f1c2789aa357f3c2dc4cd22af134b4b91acb3fb78f9fa5f7f9a7b62e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_queue.pyd
        • Size 34KB
        • SHA256 6d77d15d668cb5ddff53cff1479dffc97db5858451d4b98f6e60a23cfb529e01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_socket.pyd
        • Size 84KB
        • SHA256 ba944001aa6b53350f8c64e93643742abf1a08dd07c7dbbc13996e7d4d8a9efa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\_ssl.pyd
        • Size 177KB
        • SHA256 1cf939510359f5aa3c5f51a0ad994d9b819f5603dd100872cd30a1e25cd83f05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aj.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\aj.ico
        • Size 4KB
        • SHA256 34f1a5cfdd4983684c9156b2f25485fb1d747d0f9fab54dec3b81a9182ad9aa7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\base_library.zip
        • Size 1.3MB
        • SHA256 9ec5976fe39ee4c71f740bd999049cf24c23233fd3c11b023fa2184e9a84f481
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 09499e186cf0e434ffa17ad153aa9a66d6048c54a2c03b823e2a06c49d9affe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\libssl-3.dll
        • Size 776KB
        • SHA256 28c395290279fa4f4f54a57b85cd66d853895f925fefb8f6fdebc0d8b1cdd07c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\python3.dll
        • Size 70KB
        • SHA256 16f109e8411bc08341497c87704b7cf0d22a2678f1e3a7dca416ea7bff995469
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\python313.dll
        • Size 5.8MB
        • SHA256 3a7a6170ea840bf2a2a76d05b687b946fcdc8d0cfedfe159012b38f1e8959a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\select.pyd
        • Size 32KB
        • SHA256 a208997eb871b5c7785eb9bcc6a22ba8c43262255b59a3394fbe9912f38b4692
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI51162\unicodedata.pyd
        • Size 696KB
        • SHA256 7f8d28574732959cdb1188127fe3494c3618b602eede69c0a71846f0b5cc8a15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1564-186-0x00007FFA00B10000-0x00007FFA00FFC000-memory.dmp
        Download

        memory/1564-157-0x00007FFA119D0000-0x00007FFA11C33000-memory.dmp
        Download

        memory/1564-190-0x00007FF9FFC90000-0x00007FF9FFEF5000-memory.dmp
        Download

        memory/1564-196-0x0000022528B40000-0x0000022528B50000-memory.dmp
        Download

        memory/1564-187-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download

        memory/1564-200-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download

        memory/1564-201-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download

        memory/1564-202-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download

        memory/1564-203-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download

        memory/1564-205-0x00000225285D0000-0x0000022528B11000-memory.dmp
        Download