Analysis
- max time kernel
21s - max time network
19s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 03:36
Behavioral task
behavioral1
Sample
hola_mundo.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
hola_mundo.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target hola_mundo.exe
- Size 8.5MB
- Sample260809-d53f4azbkc
- SHA256 1700bd16818d94307088a6ad54aca3d043261b28ae0e30b1777c8067d41c9723
- MD5 07b515b9980c1d7ae856a1dd9fd2853f
- SHA1 cf1a7b63228c1e659907bbcea79f2193964a53ff
- SHA512 f61a506ddd817a7f6eadce4f8c3fea3fbae34b295616161fbc9ce21311698c1bbf2481fbbd9c44916f5f44d7eea29c7756220ae317d3a02b509f1cca63b67006
- SSDEEP 196608:MOAd3wLm7c7XEpXnH2ph1igt1/1QpL0uQg+R6tKsvoKgpVFSZ:98Em7c7XEAphJtrQSg+RKKsvFgtS
- TLSH T11596336C73E419FAF8B7843D9D55E421E2B1BC502B62D2EB13F04D161E3B6E45E386A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 568 hola_mundo.exe 568 hola_mundo.exe 568 hola_mundo.exe 568 hola_mundo.exe 568 hola_mundo.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5908 wrote to memory of 568 5908 hola_mundo.exe 90
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\_bz2.pyd
- Size 85KB
- SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
- MD5 207d4a4b7a113ef494514918f2dccdf3
- SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
- SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
- SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
- TLSH T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\_lzma.pyd
- Size 157KB
- SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
- MD5 cada2b240b280f172aeb32a1666b21e6
- SHA1 c15dc39329444433c255309eb89bae188aae1b22
- SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
- SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
- TLSH T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\_zstd.pyd
- Size 491KB
- SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
- MD5 035b0a033dd00dbe887556f4d4b852c3
- SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
- SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
- SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
- TLSH T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\base_library.zip
- Size 1.3MB
- SHA256 c6c23d42d763e886a2a06308b5a90b6fa8d11fb1fec8787dc4d1f748708a4298
- MD5 327819fe2ea4afd0071460260e9da02c
- SHA1 98c8ac4540d683795f6fc04b25db092220fbef48
- SHA512 f2bd312434622d583c8f36fc2889ec46ebe27c66b9dd608296abac0fe8a00ce2e839934d376a1335f3cc9a898160a0fc58026444856ebb9eff06b074f564d72c
- SSDEEP 24576:AdGNuUFsQZjslbeRpHQeOdP2m2dfHWn2L5Yu:AdquUFsMRJ/9Yu
- TLSH T1CE552B91B9917967FEC9F37A35B75A0CA715C0109B20D303B4A88DAC6FDF260AE558CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI59082\python314.dll
- Size 6.5MB
- SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
- MD5 006b0746b5abaf438d1bc753261c6d2c
- SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
- SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
- SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
- TLSH T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
- MD5 SHA1 SHA512 SSDEEP TLSH