Overview

overview

7

Static

static

3

e8a51e25cd...d9.exe

windows10-2004-x64

7

e8a51e25cd...d9.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 03:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e8a51e25cd69a55dcdbefcd2051b1012b6cebc62df342a104a5406b8ad2a5ad9.exe
  • Size 14.8MB
  • Sample260808-d6cl3aswev
  • SHA256 e8a51e25cd69a55dcdbefcd2051b1012b6cebc62df342a104a5406b8ad2a5ad9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 29 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e8a51e25cd69a55dcdbefcd2051b1012b6cebc62df342a104a5406b8ad2a5ad9.exe
    "C:\Users\Admin\AppData\Local\Temp\e8a51e25cd69a55dcdbefcd2051b1012b6cebc62df342a104a5406b8ad2a5ad9.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5904
    • C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\KO Scoreboards.exe
      C:\Users\Admin\AppData\Local\Temp\e8a51e25cd69a55dcdbefcd2051b1012b6cebc62df342a104a5406b8ad2a5ad9.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:2324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        KO Scoreboards.exe
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\KO Scoreboards.exe
        • Size 19.3MB
        • SHA256 01eba3905fad4dd70cc8c57bfed499edf68b0315c641fa7884abd01daba9c147
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\_socket.pyd
        • Size 81KB
        • SHA256 b38e66e6ee413e5955ef03d619cadd40fca8be035b43093d2342b6f3739e883e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\_tkinter.pyd
        • Size 62KB
        • SHA256 06ea475cbb786bd1db1c1bbd62546446e571f717303fcf868148e15612a04a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _win32sysloader.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\_win32sysloader.pyd
        • Size 15KB
        • SHA256 db277aae2b8417dbd01435a8691cc74707f6699ae3199e1b205f609cefa5ad24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\psutil\_psutil_windows.pyd
        • Size 69KB
        • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\python3.dll
        • Size 66KB
        • SHA256 1e9224ba7190b6301ef47befa8e383d0c55700255d04a36f7dac88ea9573f2fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\python312.dll
        • Size 6.6MB
        • SHA256 e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes312.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\pywintypes312.dll
        • Size 133KB
        • SHA256 9bd7f8c39a84d7b1ea43bfcd33c04631c60f4ff28167e82bb21987cc1c353766
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\tcl86t.dll
        • Size 1.7MB
        • SHA256 28b61545d3a53460f41c20dacf0e0df2ba687a5c85f9ed5c34dbfc7ed2f23e3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\vcruntime140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32api.pyd
        • Size 135KB
        • SHA256 8e09d7aa57dc33b663afd219fab21b6a70e9d98cc74a044df4d6cd94799d98c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32clipboard.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32clipboard.pyd
        • Size 28KB
        • SHA256 3d05fe104ebee5ab81767b568796aae29a5e9b100d24c34f9e1714860e5113f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shell.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32com\shell\shell.pyd
        • Size 530KB
        • SHA256 5ea50b40655b10dfcc972556c87230f473fefa3e141b493ff66d346e9060f2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32file.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32file.pyd
        • Size 139KB
        • SHA256 359ef2dc11546f619a9ac53c01a399d621c093b7cfc843fb9d7b211d0b15e103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32gui.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32gui.pyd
        • Size 218KB
        • SHA256 f468a03be44633fdeabc08b4a9f8b135f9e31d74b935f85631c23c7fbb9367fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32process.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\win32process.pyd
        • Size 52KB
        • SHA256 6d02ff9b22afa97bdb26d99454462a612848efdc3d0beb54cea2b4912d07a14c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\FC26_Guard\1.0.0.0\zlib1.dll
        • Size 141KB
        • SHA256 c89c8a2fcf11d8191c7690027055431906aae827fc7f443f0908ad062e7e653e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _imaging.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\PIL\_imaging.pyd
        • Size 2.5MB
        • SHA256 c8c519ec72bf75b2945b4fc4afa854af2fca8b970a403134f9ddda3e164d85e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\_bz2.pyd
        • Size 82KB
        • SHA256 02d772c03704fe243c8de2672c210a5804d075c1f75e738d6130a173d08dfcde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\_ctypes.pyd
        • Size 121KB
        • SHA256 bc3b83d2dc9e2f0e6386ed952384c6cf48f6eed51129a50dfd5ef6cbbc0a8fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\_hashlib.pyd
        • Size 63KB
        • SHA256 e47e76d70d508b62924fe480f30e615b12fdd7745c0aac68a2cddabd07b692ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\_lzma.pyd
        • Size 155KB
        • SHA256 34130d8abe27586ee315262d69af4e27429b7eab1f3131ea375c2bb62cf094be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\libcrypto-3.dll
        • Size 4.9MB
        • SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom312.dll
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\pythoncom312.dll
        • Size 674KB
        • SHA256 18e5d69b62110f48da01842f9ddfd99d06cc561f0866371714ec6534fcb4e5ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\select.pyd
        • Size 30KB
        • SHA256 bc71fbdfd1441d62dd86d33ff41b35dc3cc34875f625d885c58c8dc000064dab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\tk86t.dll
        • Size 1.5MB
        • SHA256 23a195e1e3922215148e1e09a249b4fe017a73b3564af90b0f6fd4d9e5dda4da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32event.pyd
        • Path C:\Users\Admin\AppData\Local\FC26_G~1\100~1.0\win32event.pyd
        • Size 29KB
        • SHA256 a6b896456443447a663fe25783dfa95929dc8ade8d7970fd78d3b4e65100371e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2324-1025-0x00007FF7DA930000-0x00007FF7DBCE6000-memory.dmp
        Download

        memory/5904-1026-0x00007FF709530000-0x00007FF70A436000-memory.dmp
        Download