Overview

overview

7

Static

static

3

3c300726a6...d5.exe

windows10-2004-x64

7

3c300726a6...d5.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/08/2026, 11:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5.exe
  • Size 5.8MB
  • Sample260812-n5185stvbx
  • SHA256 3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 17 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5.exe
    "C:\Users\Admin\AppData\Local\Temp\3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:704
    • C:\Users\Admin\AppData\Local\Temp\3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5.exe
      "C:\Users\Admin\AppData\Local\Temp\3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5.exe"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4804

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Crypto.Cipher._AES.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Cipher._AES.pyd
        • Size 28KB
        • SHA256 6a8b8b957edbe2c324146dd915231f05711db128b1291bfc7fa9c821c7881caa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Crypto.Cipher._ARC4.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Cipher._ARC4.pyd
        • Size 8KB
        • SHA256 cda807a9cb5515f37b030f6ef4153b1e58b946a710af498173a756516d77a1d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Crypto.Cipher._DES.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Cipher._DES.pyd
        • Size 53KB
        • SHA256 a2bd61a869173321d34f835d409d3a5a251797bf63f531d25396778bb39454cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Crypto.Cipher._DES3.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Cipher._DES3.pyd
        • Size 53KB
        • SHA256 2792a38a1974fad445e6b7899405a5e1c13a2b1a21ef8f2f1951077659fbad89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Crypto.Hash._MD4.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Hash._MD4.pyd
        • Size 10KB
        • SHA256 5a95d92de1e906b8e12725c0628080313e271ec6b7f29e8d14951abccfe8112c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Crypto.Util.strxor.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\Crypto.Util.strxor.pyd
        • Size 7KB
        • SHA256 d4e63d4a0c9243c076054861274be232adebef41533ec4cbb8a6fa833903ace3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\_ctypes.pyd
        • Size 89KB
        • SHA256 b700441351b3a24a1ec392376984d3d95a541ea548c77f0df55d7af579ea9c1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\_hashlib.pyd
        • Size 993KB
        • SHA256 fa57bf3173f2d636984305401c06f1618b8119fea2c311d1173566ea236fa0c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\_socket.pyd
        • Size 45KB
        • SHA256 a24422d519e5a9283a0887d4be09be2ac89797886d8f45151cab5e9fef8db1e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\_ssl.pyd
        • Size 1.3MB
        • SHA256 4ba198e7f53a37b3a825ff2ce4d3e6ca00ad96e62852f0127a46c57a9a4a3026
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python27.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\python27.dll
        • Size 2.5MB
        • SHA256 e3eed66221a6552d4b9ae7350b3dc30de238a6029efae060514d2780c02fedb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rpcdump.exe.manifest
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\rpcdump.exe.manifest
        • Size 1011B
        • SHA256 f246cdf5f2f0e97592bcc328ca649303dfb5bbd047f890e41216ff49b727eb87
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI7042\select.pyd
        • Size 10KB
        • SHA256 039981e17c2eb88cb2d08e50f2d323027e27683a7b3b3bc042e76fba40d34ab2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4804-45-0x0000000000C90000-0x0000000000CA0000-memory.dmp
        Download

        memory/4804-58-0x0000000000CD0000-0x0000000000CE0000-memory.dmp
        Download