Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 18:33
Behavioral task
behavioral1
Sample
gta7.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gta7.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target gta7.exe
- Size 10.4MB
- Sample260812-w7ef6asfpc
- SHA256 65dad4c4d22cc16bff8298d001166c892890619bd5b7828cf0ef947cf166b78d
- MD5 c94397dfc1c44b75ee1d7654cb1f1aa5
- SHA1 64c3aad44b10aa9e4113b71b13669b6a1176f796
- SHA512 a0f9817909200704fecbc4c6affd25d0917d64940bebfa44876427b3780f991e22ce35952b20747f6b9292da356f212598fdf9cf539b1fb1e1a87bac4763f829
- SSDEEP 196608:UcpD12eYo3KNGQXZl8f1jPIetMiuHMzlcurHSuhHToAUPNfGU5vXvcLbdIBgZ+:3pd3wGaa5wEMiuHClcu3hHTodRGkX0fI
- TLSH T14CB6336963D049F5FEB7D5389A231294E37238421331C5AF03D98791BE376E52E3A623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 8 IoCs
pid Process 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe 4796 gta7.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4336 wrote to memory of 4796 4336 gta7.exe 90
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\_bz2.pyd
- Size 84KB
- SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
- MD5 2be172c3086efe56c7e1d3279142295a
- SHA1 910e0d7ec11d1efda15d03ef826423834aa59fe3
- SHA512 37f84d9e6d766d8a97ccf0bd3c1a2a07f528cf45290762ef1f45e603cb513f43befec046693cf2e029366cca1682cd2753e54c53431773aba63c840bafcbf369
- SSDEEP 1536:5Qioz7CmAZG1OwJYrmbdmmv0KV06G68u+SSnrO+pIWCVeytH/9vfIZRE2:dozW2vJYanvEd3rlpIWCVWZb
- TLSH T184839E82F36857F6F49B91B986810797F770BA55071093BFF288C2992F03B816E5C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\_cffi_backend.cp312-win_amd64.pyd
- Size 177KB
- SHA256 53de34afc3939d81bf2498b77425c52e2c3f3164f8cfe2543d3acc8f24134488
- MD5 429d90ecf87f4d8df562bae6b6157718
- SHA1 7907e7f8b44267f5f8c62602d77aaede49d3e4d2
- SHA512 f561658624c72efa89fec6dc84a490b876d030a2fd98570a40ab2750694702e45716267e1e9c66c149fcab097728bd1821d9519bb9b46593fe28171b5c854ac3
- SSDEEP 3072:4r50eONP/8gtmDqd/6XIrcqwnQ3j6lMU2TS9Jss7kaN0S7JxSTL7K6X58YHo:4y8gGbAcqwnQ3elMU2sb0wxSTLOuuYH
- TLSH T196045C5A339C11B2D5A251788A679B53E3B3B431170197CF01A0C7B62F1BBE67A7EB40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\_lzma.pyd
- Size 157KB
- SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
- MD5 7c25a079b992919cc97221955dac050c
- SHA1 d12d4e0f36bad9c578dcb69436fc2a7505feb316
- SHA512 ac7e3a3c7b8f766a0e0811718a048f0f8a4340374023fcfc7df0454e030521cd52314c23e80de118f24755046d77bac17d5abee634e7e5fe950b97f53bf5a64d
- SSDEEP 3072:tfXToXxWCKqZGOPenZCIlznfF9mNoxe6FK0GIHMJpIWZ1iW4I+:troXxSBOMvNYOxzxGIHm
- TLSH T10CF34B96B394F0D5F7328C38D6628F53E7F5785A0320929A01CC976D2B1FB759A2A313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\base_library.zip
- Size 1.3MB
- SHA256 bcc4a804b74ac7c9775e7dfb271742bbd652bbcc6ac0e0541c5f8a1ac9f1a112
- MD5 dd70a44d6a306e10fc11538dbe2a7f93
- SHA1 95c42c0cbec262bac0fa0875cb79513710bd36d9
- SHA512 5b09a85f14b042802a9b76d80ee97e9336992fe57ee87b9c5300c91c523685c6c231efb0309b21653c9b314731b6a9b0eca4e8d5bad47a288b7ef6fe74f08d3f
- SSDEEP 12288:k/sHnVTVihlyixmpvQXMHYT5pdRn8lJGUmfHbP1dmXNZ2/H+9Wcrmn9l4z:kKhcR8lJGUabP1dmX2/H+9/692z
- TLSH T1EF55D6817A92A5B3FC84F3BA04260A0EA3658571BF45C747389FC5E46F8F2E49E914DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\cryptography\hazmat\bindings\_rust.pyd
- Size 8.8MB
- SHA256 92f58bb4f01a75a0ef4dd9425dc2a96ddfe25fc93fd9dc11ea8f0d05b7a4f085
- MD5 c4521bd3ab7f887e06601d75f6100d38
- SHA1 3a2433fa77ec08e938c211f4d59e63bd1cde089e
- SHA512 0485f18134712973fbf67d55ebed4c59b9c6467979e2b6349861c84cb064eeafb94e964bfa28c3fa644318d10d4148a6c042595ce6288de37e4410369713ed30
- SSDEEP 98304:8vYkHms4/TObjd7AM1iG06Oe32rWtnIQ+icVSt4j:hCbxAM1iG06OStxB2
- TLSH T138966C25BAA940A8D86AC4B8C38756339B7174CA077467EF49D486B52F77FE02B3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\python3.DLL
- Size 68KB
- SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
- MD5 962428e9e68d43ecc16f3e33f2ea8667
- SHA1 6d0f349ab2e795b138a64346b784fc7fcdb6d87f
- SHA512 a925586bbc4cc9d2f58f5b6eeed82e429c23dd57d7b33609c0067fc14ed66ed165ac8121eeec1db3f993412f28ba527e961e3d6bcc201d4cda2037f85931ffc5
- SSDEEP 768:BV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/s:BDmF61JFn+/OulIWL0vytH/9ifITgj
- TLSH T125637042BB54F893DBFA66FC7AD199CE642B12CC572984ECA47593D30D1A310A2E334D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI43362\python312.dll
- Size 6.6MB
- SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
- MD5 de50496cece613ec7ebedbf9f2aefecd
- SHA1 6cd49527f647f7ea96872b89bb4fde20afbada1b
- SHA512 a8d22a6f6140280ff36476cdc7cda4a3ebc46f0ac63b2a3c44fbd5f45aa3d343121e63b092b320d1dd8dbb7bc586a679bbcf738f485f36502a34592521aaf7a8
- SSDEEP 98304:2nZOqBIZAopgdKJUskfih6ZizvmHDMiEXAbBu:IoJedKJnkf8ivs
- TLSH T12C666B15729CC0A9C96795B8CC13C28EE7B27C117F51434B30ABB71E2F733A1966A789
- MD5 SHA1 SHA512 SSDEEP TLSH