Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/08/2026, 11:24

General

  • Target
    BarkFart.exe
  • Size 40.4MB
  • Sample260812-nh8ppswake
  • SHA256 4d992a10c4335e3aa63feaf0ab21d1e0dabee54ca155120fd3f67a4e507858c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 50 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BarkFart.exe
    "C:\Users\Admin\AppData\Local\Temp\BarkFart.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5684
    • C:\Users\Admin\AppData\Local\Temp\BarkFart.exe
      "C:\Users\Admin\AppData\Local\Temp\BarkFart.exe"
      2⤵
      • Loads dropped DLL
      PID:3732

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_bz2.pyd
        • Size 85KB
        • SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_ctypes.pyd
        • Size 139KB
        • SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_lzma.pyd
        • Size 157KB
        • SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_socket.pyd
        • Size 85KB
        • SHA256 ff3e97cd11bdc68798e5b3dcd5295d1efba179b7344142d50d066bbf1c2d79cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_tkinter.pyd
        • Size 67KB
        • SHA256 b2e1dbe2079b52535b60dbb72ee54ff0da145324afcdb6a7c915c61b8006758b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _wmi.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_wmi.pyd
        • Size 39KB
        • SHA256 5a7f3444f1c2f85fb5573bc330c1aea2c583912bb6f948ff81f8fd89a30e67be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _zstd.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_zstd.pyd
        • Size 491KB
        • SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\base_library.zip
        • Size 1.3MB
        • SHA256 74b5d1189fbce498cba1f58d5cab1cf5f1a9d00b51769ae67d00b75b46602db4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDL2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\SDL2.dll
        • Size 1.5MB
        • SHA256 b37740a72a7a9706216df9f0134894bb7a850b356fd149398c67d874cbcfacb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\base.cp314-win_amd64.pyd
        • Size 30KB
        • SHA256 9976a480dbd7ffcd1557a3a6a26d3c5a632faf0aaf1493686107b5b2ace07b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferproxy.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\bufferproxy.cp314-win_amd64.pyd
        • Size 17KB
        • SHA256 6e3ca0d592b5dc2e160937d78e62b813ae32bcb03438a17e349e276a2faf9a7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        color.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\color.cp314-win_amd64.pyd
        • Size 40KB
        • SHA256 c31843681df0bf16d1bfc655fb5949fa08027c1ac83e0e566495e9aa27540bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        constants.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\constants.cp314-win_amd64.pyd
        • Size 50KB
        • SHA256 64a9a264a08557608c186293863ce3e95aa5dc4c236967fbfd43732b9fcfadf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        display.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\display.cp314-win_amd64.pyd
        • Size 48KB
        • SHA256 ab639341fa0ba074e86b12e9740f2fa932d1e2d7f53c7556d0b7a8acc7194815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        draw.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\draw.cp314-win_amd64.pyd
        • Size 66KB
        • SHA256 2a3d3c8fd20322ad4ecf6669197cf14e568f970732694cdb4cadfdca01af968e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\event.cp314-win_amd64.pyd
        • Size 43KB
        • SHA256 8aeb03a5001777f6c10e0cc1ad643e033f0ccd656e3068c4b415b2a9fabab1e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        joystick.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\joystick.cp314-win_amd64.pyd
        • Size 20KB
        • SHA256 a5f54341c1a301b19cd953f1c902e7508c910f5e89ee3c197196b8c83c5fbb0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        math.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\math.cp314-win_amd64.pyd
        • Size 72KB
        • SHA256 90fac5458d66ea8c6d7f0706dc3a537d9f83e5b54a6da70265af569ffa223ab8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rect.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\rect.cp314-win_amd64.pyd
        • Size 70KB
        • SHA256 19cfe725daf3696109bbfe58b37c8c10c1d117852164e97c60ad0335a13eada2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rwobject.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\rwobject.cp314-win_amd64.pyd
        • Size 18KB
        • SHA256 b3e21348dfe9c4c4c810cb040af09fd7ccd8069c415b0134862bc7f2548a3821
        • MD5 SHA1 SHA512 SSDEEP TLSH

        surface.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\surface.cp314-win_amd64.pyd
        • Size 237KB
        • SHA256 d767e9b20b408bd5897054146d7d241a4b185d12cc33b8fae91576713faec0a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        surflock.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\surflock.cp314-win_amd64.pyd
        • Size 10KB
        • SHA256 798c460e1be55a2591286db1c3f8be7d0e68af164fa5111b3b45eb5be964630f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        window.cp314-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\window.cp314-win_amd64.pyd
        • Size 30KB
        • SHA256 f8afb69bcad3d29301d216c5a18a9b2b821ff0c2141d8241ea041a409f3299fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\python3.DLL
        • Size 72KB
        • SHA256 be1017ca4ca8ff837efbb343d5c8f739bd67bd1c43fb41068a539b19357c0213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\python314.dll
        • Size 6.4MB
        • SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\tcl86t.dll
        • Size 1.8MB
        • SHA256 4b79f9cfa40821eed283ee44519420607fdd669db185e4d1872910414f5ea775
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\tk86t.dll
        • Size 1.5MB
        • SHA256 e66f19c10278844fed1e01b4b23a996626843ee764f0418297edfaa12ff543b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\ucrtbase.dll
        • Size 1.3MB
        • SHA256 3088326cb0fe5b5646e02c7b2de71ae363fcd26a0000cf32209c8bed05a7a866
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\zlib1.dll
        • Size 144KB
        • SHA256 17e85535ff06251fe7e4e454eac519a617ffda70fbaa407733ec8de314f66a46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3732-1194-0x00007FFFB8A60000-0x00007FFFB8A89000-memory.dmp