Overview

overview

7

Static

static

3

Mail Acces...er.exe

windows10-2004-x64

7

Mail Acces...er.exe

windows11-ltsc_2024-x64

7

mail acces...er.pyc

windows10-2004-x64

3

mail acces...er.pyc

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 11:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Mail Access Checker/mail access checker.exe
  • Size 8.4MB
  • Sample260808-nvv95swcma
  • SHA256 974737403125b78c57db8126b28d8b80686b0447cc12d1bd141ee6e89e55fc26
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 14 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Mail Access Checker\mail access checker.exe
    "C:\Users\Admin\AppData\Local\Temp\Mail Access Checker\mail access checker.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4900
    • C:\Users\Admin\AppData\Local\Temp\Mail Access Checker\mail access checker.exe
      "C:\Users\Admin\AppData\Local\Temp\Mail Access Checker\mail access checker.exe"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4852

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\VCRUNTIME140.dll
        • Size 84KB
        • SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_ctypes.pyd
        • Size 109KB
        • SHA256 2695a7635fa2bebb6bd720146916f21676e846ea5f39288886bbb27ce2af92f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_queue.pyd
        • Size 24KB
        • SHA256 7f43dfb5ba9f4afa82630cd3e234ede0596abe3584f107b9855747ef1cde9acc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_socket.pyd
        • Size 67KB
        • SHA256 04e286e59facf3f1ddd54d92b45d7662044c0b17d370eb20eb9ca0c8c8e3cb9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_ssl.pyd
        • Size 108KB
        • SHA256 5ad15dbc726d002d356bfd7e6a077f8568fee463b7ce5f71c33a04b2e11558f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_tkinter.pyd
        • Size 58KB
        • SHA256 df2c5e49d13daa417cd599c0955aeea0679543766e5f30f1814b1f8bf9c6435d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\base_library.zip
        • Size 768KB
        • SHA256 c1076f230a337432488b2dddf00388772595b599c8415ef5bfc401bbae366dbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libcrypto-1_1.dll
        • Size 2.1MB
        • SHA256 541adbc9654d967491d11359a0e4ad4972d2bd25f260476dd7576c576478698a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libffi-7.dll
        • Size 28KB
        • SHA256 0c7ec6de19c246a23756b8550e6178ac2394b1093e96d0f43789124149486f57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libssl-1_1.dll
        • Size 524KB
        • SHA256 db16853dbc64f045ae2a972f7605a6f192d09b79cae86fd93b8434fa7d9e031f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\python38.dll
        • Size 3.7MB
        • SHA256 527819a45446a7729e04a70aee587ec7e46d787c159d0f9d4e824e54c1653f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\select.pyd
        • Size 23KB
        • SHA256 c86c229e97b11cb74cc87bc595d4d936171c5d334e367f55b2ee3f9bcfbc6c92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\tcl86t.dll
        • Size 1.3MB
        • SHA256 e79443e9413ba9a4442ca7db8ee91a920e61ac2fb55be10a6ab9a9c81f646dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\tk86t.dll
        • Size 1.1MB
        • SHA256 19f70dc79994e46d3e1ef6be352f5933866de5736d761faa8839204136916b3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download