Analysis

  • user interaction
    yes
  • max time kernel
    79s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/08/2026, 06:31

General

  • Target
    lumi_spammer.exe
  • Size 271.0MB
  • Sample260817-hakd9avdqa
  • SHA256 ac2ca5bcc0b9c7e01b3eb34df0696cc574b4b0e3b313277508ac11cfa45467dd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 22 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lumi_spammer.exe
    "C:\Users\Admin\AppData\Local\Temp\lumi_spammer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Users\Admin\AppData\Local\Temp\lumi_spammer.exe
      "C:\Users\Admin\AppData\Local\Temp\lumi_spammer.exe"
      2⤵
      • Loads dropped DLL
      PID:620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp312-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\PIL\_imaging.cp312-win_amd64.pyd
        • Size 2.5MB
        • SHA256 743c7c051b47d60a6bba4b3537e564f1f2e745e342e7351cab5fbe2d0bb96594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_asyncio.pyd
        • Size 69KB
        • SHA256 3b46fa8f966288ead65465468c8e300b9179f5d7b39aa25d7231ff3702ca7887
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_bz2.pyd
        • Size 83KB
        • SHA256 cb15d6cc7268d3a0bd17d9d9cec330a7c1768b1c911553045c73bc6920de987f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_ctypes.pyd
        • Size 122KB
        • SHA256 6c5f31bef3fdbff31beac0b1a477be880dda61346d859cf34ca93b9291594d93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_decimal.pyd
        • Size 251KB
        • SHA256 da8bb3d54bbba20d8fa6c2fd0a4389aec80ab6bd490b0abef5bd65097cbc0da4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _elementtree.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_elementtree.pyd
        • Size 130KB
        • SHA256 798e8ddfc45495c26593a0550554e32a62cbdd9da5556e25da7231a0bf8fd274
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_hashlib.pyd
        • Size 64KB
        • SHA256 43acecdc00dd5f9a19b48ff251106c63c975c732b9a2a7b91714642f76be074d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_lzma.pyd
        • Size 156KB
        • SHA256 a46189c5bd0302029847fed934f481835cb8d06470ea3d6b97ada7d325218a9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_multiprocessing.pyd
        • Size 34KB
        • SHA256 2feb0bf9658634fe8405f17c4573feb1c300e9345d7965738bedeb871a939e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _overlapped.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_overlapped.pyd
        • Size 54KB
        • SHA256 2187281a097025c03991cd8eb2c9ca416278b898bd640a8732421b91ada607e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_queue.pyd
        • Size 31KB
        • SHA256 0a6acfd24dfbaa777460c6d003f71af473d5415607807973a382512f77d075fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_socket.pyd
        • Size 81KB
        • SHA256 67aca001d36f2fce6d88dbf46863f60c0b291395b6777c22b642198f98184ba3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_ssl.pyd
        • Size 174KB
        • SHA256 fa5e6fe9545f83704f78316e27446a0026fbebb9c0c3c63faed73a12d89784d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_tkinter.pyd
        • Size 64KB
        • SHA256 f91d38d865378a120f76596c90e79f6ba57fcf3c39dedb99098e597d9b577256
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _wmi.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\_wmi.pyd
        • Size 36KB
        • SHA256 73b7ee3156ef63d6eb7df9900ef3d200a276df61a70d08bd96f5906c39a3ac32
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\base_library.zip
        • Size 1.3MB
        • SHA256 83094f38f47cf7a1a42995e34d5133416e15a7f4e03004f5356937ef69639ade
        • MD5 SHA1 SHA512 SSDEEP TLSH

        blue.json

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\customtkinter\assets\themes\blue.json
        • Size 4KB
        • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dark-blue.json

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\customtkinter\assets\themes\dark-blue.json
        • Size 4KB
        • SHA256 6a57fa6f8fb8961a30ce6429522b180d76e3af9b8e0daac259059841386a6bd3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __init__.py

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\cv2\__init__.py
        • Size 6KB
        • SHA256 957a91bfd98ffb07a10cd789b7c5c46806568476b61e34c7ad56a00092b981a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        config-3.py

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\cv2\config-3.py
        • Size 748B
        • SHA256 de28c7b5213cca148f09469916584611b3d66c1c8c432880259d6a3a92380213
        • MD5 SHA1 SHA512 TLSH

        config.py

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\cv2\config.py
        • Size 123B
        • SHA256 6c6367abce55995ae4a8d3c199420ec53afab287cb17dfc2f430378af75dd301
        • MD5 SHA1 SHA512 TLSH

        load_config_py3.py

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\cv2\load_config_py3.py
        • Size 253B
        • SHA256 074dfaf20ac94f2ca3815393de3a394944470334c51a85b9521f452e0e17bb85
        • MD5 SHA1 SHA512 TLSH

        version.py

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\cv2\version.py
        • Size 97B
        • SHA256 a0f4881984ab057437cf5692d2d5ec35049698f4acc2b43c755f2d276df45a7a
        • MD5 SHA1 SHA512 TLSH

        icon.ico

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\icon.ico
        • Size 422KB
        • SHA256 91986b78918ce205ecefbbae625aad6a52d4a1c7bf73fe39cd553026c22fbd2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\libssl-3.dll
        • Size 774KB
        • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libscipy_openblas64_-74a408729250596b0973e69fdd954eea.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\numpy.libs\libscipy_openblas64_-74a408729250596b0973e69fdd954eea.dll
        • Size 19.5MB
        • SHA256 74a408729250596b0973e69fdd954eea07a70ff527a1dbaccf9ae21247b80377
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\numpy.libs\msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll
        • Size 561KB
        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiarray_umath.cp312-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\numpy\_core\_multiarray_umath.cp312-win_amd64.pyd
        • Size 3.5MB
        • SHA256 be486c4cc6af57b19e990d6de41508736675908fc68042c61f8cedb618c0d6ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _umath_linalg.cp312-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd
        • Size 109KB
        • SHA256 1508bb16bcae43315caf62ccad94fc70f43fd2d179b405d37542bfee67129b7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\pyexpat.pyd
        • Size 197KB
        • SHA256 d32d7722d6ed2b2780c039d63af044554c0ba9cf6e6efef28ebc79cb443d2da0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\python3.DLL
        • Size 66KB
        • SHA256 25a39e721c26e53bec292395d093211bba70465280acfa2059fa52957ec975b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\python312.dll
        • Size 6.6MB
        • SHA256 c045b57348c21f5f810bae60654ae39490846b487378e917595f1f95438f9546
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\select.pyd
        • Size 30KB
        • SHA256 00bd8bb6dec8c291ec14c8ddfb2209d85f96db02c7a3c39903803384ff3a65e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\tcl86t.dll
        • Size 1.7MB
        • SHA256 1026c8c8eaaf3744f3ad8e80b4baa366e88aa0a048c0823838e39acef86ce964
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\tk86t.dll
        • Size 1.5MB
        • SHA256 59e2a8784bdbd35b4bf8e688690e2672b6b5d652cc063ba19661eff2715b8e13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\unicodedata.pyd
        • Size 1.1MB
        • SHA256 bf669344d1b1c607d10304be47d2a2fb572e043109181e2c5c1038485af0c3d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30482\zlib1.dll
        • Size 143KB
        • SHA256 acfa5dbb606aada439fa2bca317d023725cbbd5b5f111fbd61a488d449966845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/620-1453-0x00007FFB2C700000-0x00007FFB2C72A000-memory.dmp

        memory/620-1454-0x00007FFB1D270000-0x00007FFB1E5EF000-memory.dmp