Analysis
- max time kernel
120s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 16:55
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20260513-en
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
main.exe
Resource
win11ltsc2024-20260709-en
2 signatures
120 seconds
General
- Target main.exe
- Size 6.7MB
- Sample260810-vffdpstbpe
- SHA256 b13aad122aedc151519f380f8be92be3052326aa3353415d8c8a7ec1594750a0
- MD5 22fb295bdb9fb33d153e5e45acb38565
- SHA1 24873b85bff53ef89c44a2406c41f4a474967cbb
- SHA512 fc41f9db275e4e0c7d82a3ade057bd0554ff2979a630ca5e0aca0147b14ff81c0e7fa95675f9082e5814123446153eb7f7a8a92c5ba95bcc6c897bfdc04aaed0
- SSDEEP 196608:ar2eDSJurHxuhHToAUPNfGU5vXvcLY/ktvq:aouMhHTodRGkX0F
- TLSH T1666633A666C648F8FD63B238C9538526F37278555331C1EB03D886963F336D02A3A772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 5628 main.exe 5628 main.exe 5628 main.exe 5628 main.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5796 wrote to memory of 5628 5796 main.exe 88
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI57962\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI57962\_bz2.pyd
- Size 84KB
- SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
- MD5 2be172c3086efe56c7e1d3279142295a
- SHA1 910e0d7ec11d1efda15d03ef826423834aa59fe3
- SHA512 37f84d9e6d766d8a97ccf0bd3c1a2a07f528cf45290762ef1f45e603cb513f43befec046693cf2e029366cca1682cd2753e54c53431773aba63c840bafcbf369
- SSDEEP 1536:5Qioz7CmAZG1OwJYrmbdmmv0KV06G68u+SSnrO+pIWCVeytH/9vfIZRE2:dozW2vJYanvEd3rlpIWCVWZb
- TLSH T184839E82F36857F6F49B91B986810797F770BA55071093BFF288C2992F03B816E5C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI57962\_lzma.pyd
- Size 157KB
- SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
- MD5 7c25a079b992919cc97221955dac050c
- SHA1 d12d4e0f36bad9c578dcb69436fc2a7505feb316
- SHA512 ac7e3a3c7b8f766a0e0811718a048f0f8a4340374023fcfc7df0454e030521cd52314c23e80de118f24755046d77bac17d5abee634e7e5fe950b97f53bf5a64d
- SSDEEP 3072:tfXToXxWCKqZGOPenZCIlznfF9mNoxe6FK0GIHMJpIWZ1iW4I+:troXxSBOMvNYOxzxGIHm
- TLSH T10CF34B96B394F0D5F7328C38D6628F53E7F5785A0320929A01CC976D2B1FB759A2A313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI57962\base_library.zip
- Size 1.2MB
- SHA256 2121232a073aaaa12972a8b2f151ce91c92d92cb44dddc5d97697e9c8b6ec353
- MD5 4b63f71329a7ea7502454110bae23780
- SHA1 3f0ed1b17b8368e973d11b9360da9ff48af5ecf6
- SHA512 01717f0c1173e7c521a77496a48cabe2b16599f945b1de3a342cb8eb16a673c3ccb895b3eb17fa261e023318d8baf7b902943b3ab904f1a83242cd430b0a6866
- SSDEEP 12288:TVXUyUbi6Zj5mvFpfOYCbQVJP1ASUaAXdsLr+2CcUdTzpUxIKivqe:TuYq6JP1ASUaAXdsL63XJKyqe
- TLSH T1D845B480B692E4B3FC48F3BB04261A0EA3654670BF45D74729A7C5E49F9F2E49D819CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI57962\python312.dll
- Size 6.6MB
- SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
- MD5 de50496cece613ec7ebedbf9f2aefecd
- SHA1 6cd49527f647f7ea96872b89bb4fde20afbada1b
- SHA512 a8d22a6f6140280ff36476cdc7cda4a3ebc46f0ac63b2a3c44fbd5f45aa3d343121e63b092b320d1dd8dbb7bc586a679bbcf738f485f36502a34592521aaf7a8
- SSDEEP 98304:2nZOqBIZAopgdKJUskfih6ZizvmHDMiEXAbBu:IoJedKJnkf8ivs
- TLSH T12C666B15729CC0A9C96795B8CC13C28EE7B27C117F51434B30ABB71E2F733A1966A789
- MD5 SHA1 SHA512 SSDEEP TLSH