Analysis

  • max time kernel
    153s
  • max time network
    164s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 22:54

General

  • Target
    Sunnify-Windows.exe
  • Size 184.6MB
  • Sample260813-2vm6eshj8y
  • SHA256 f6d7ef54f2757ba4cf88d53309f24d59cbe32bc9c686b06ef3343b24d6e034ca
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 41 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sunnify-Windows.exe
    "C:\Users\Admin\AppData\Local\Temp\Sunnify-Windows.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Users\Admin\AppData\Local\Temp\Sunnify-Windows.exe
      "C:\Users\Admin\AppData\Local\Temp\Sunnify-Windows.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      PID:2568

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        81d243bd2c585b0f4821__mypyc.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\81d243bd2c585b0f4821__mypyc.cp313-win_amd64.pyd
        • Size 213KB
        • SHA256 ba7fc544994f126cb7485ce52d265d2f32e93c4f1ea1fcd6fcdee3918f271979
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSVCP140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\MSVCP140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSVCP140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\MSVCP140_1.dll
        • Size 35KB
        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSVCP140_2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\MSVCP140_2.dll
        • Size 273KB
        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\Qt6Core.dll
        • Size 10.0MB
        • SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Gui.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\Qt6Gui.dll
        • Size 9.1MB
        • SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Widgets.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\Qt6Widgets.dll
        • Size 6.3MB
        • SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\Qt6\bin\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtCore.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\QtCore.pyd
        • Size 2.5MB
        • SHA256 91dd5166110b88a4f4d3acda6fe6c10ed699882dd3602328a59e9f656cc766b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtGui.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 cf5ae37fd119fb29a53f1f2cea1362fdf036d940191be45d83da0f98ce8752b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtWidgets.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 4f81361816e94e1ae05f178085b22d5b9b19e417713b1966dd481a4017aa3b21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sip.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\PyQt6\sip.cp313-win_amd64.pyd
        • Size 108KB
        • SHA256 3f36d67b20f505dde46032f79d5e384ef3ba34faed586ee086f5827867f6bdb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_bz2.pyd
        • Size 84KB
        • SHA256 76a33e2baa3880aa46290cc7d5810b3155c5e2f5a1cc7d3f7b751f6434144ada
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_ctypes.pyd
        • Size 131KB
        • SHA256 75687620596877b0dde462e74ae12140d695b3c78df3c6c099d55717768dde42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_decimal.pyd
        • Size 279KB
        • SHA256 906964c01d04b360c316a2bb86d03d9ca9864e039baa01fa866815e6dce4a9b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_hashlib.pyd
        • Size 67KB
        • SHA256 5eb4a2aa9e28b49cb2a4f6ecee21f3c2b629b43a0709bad1d7e6204bac74eac2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_lzma.pyd
        • Size 155KB
        • SHA256 f221ed5f1c2789aa357f3c2dc4cd22af134b4b91acb3fb78f9fa5f7f9a7b62e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_queue.pyd
        • Size 34KB
        • SHA256 6d77d15d668cb5ddff53cff1479dffc97db5858451d4b98f6e60a23cfb529e01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_socket.pyd
        • Size 84KB
        • SHA256 ba944001aa6b53350f8c64e93643742abf1a08dd07c7dbbc13996e7d4d8a9efa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_ssl.pyd
        • Size 177KB
        • SHA256 1cf939510359f5aa3c5f51a0ad994d9b819f5603dd100872cd30a1e25cd83f05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _wmi.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\_wmi.pyd
        • Size 38KB
        • SHA256 ca38a50c27413a5acfd14b30b0433fcf80a64ad0020e41aceeb3666f8439aba4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\base_library.zip
        • Size 1.3MB
        • SHA256 cd26ba4a242a9d65a15dba309ea6e4e7c7d65198b81c60306f621957405915c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cd.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\charset_normalizer\cd.cp313-win_amd64.pyd
        • Size 10KB
        • SHA256 2e9f5049b3c5db7ab78c6abb94dfbbfe035ebab8f40594320f8c92221f486f24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 09499e186cf0e434ffa17ad153aa9a66d6048c54a2c03b823e2a06c49d9affe4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\libssl-3.dll
        • Size 776KB
        • SHA256 28c395290279fa4f4f54a57b85cd66d853895f925fefb8f6fdebc0d8b1cdd07c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\python3.DLL
        • Size 70KB
        • SHA256 16f109e8411bc08341497c87704b7cf0d22a2678f1e3a7dca416ea7bff995469
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\python313.dll
        • Size 5.8MB
        • SHA256 3a7a6170ea840bf2a2a76d05b687b946fcdc8d0cfedfe159012b38f1e8959a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\select.pyd
        • Size 32KB
        • SHA256 a208997eb871b5c7785eb9bcc6a22ba8c43262255b59a3394fbe9912f38b4692
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lorem ipsum.txt

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512 TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\ucrtbase.dll
        • Size 1.3MB
        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI22242\unicodedata.pyd
        • Size 696KB
        • SHA256 7f8d28574732959cdb1188127fe3494c3618b602eede69c0a71846f0b5cc8a15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2568-241-0x00007FFD60930000-0x00007FFD60BBF000-memory.dmp

        memory/2568-281-0x00007FFD5DD20000-0x00007FFD5E36D000-memory.dmp

        memory/2568-280-0x00007FFD5E370000-0x00007FFD5E84B000-memory.dmp

        memory/2568-282-0x000002E8FCE10000-0x000002E8FCE20000-memory.dmp

        memory/2568-283-0x000002E8FCE10000-0x000002E8FCE20000-memory.dmp