Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/08/2026, 15:35

General

  • Target
    MythosR4T.exe
  • Size 75.1MB
  • Sample260817-s1mbmstdne
  • SHA256 a031ea718a07308f6501068db3d69e680d151d4a3cbcc5c460efdac272e8138d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MythosR4T.exe
    "C:\Users\Admin\AppData\Local\Temp\MythosR4T.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Users\Admin\AppData\Local\Temp\MythosR4T.exe
      "C:\Users\Admin\AppData\Local\Temp\MythosR4T.exe"
      2⤵
      • Loads dropped DLL
      PID:708

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Windows\Temp\_MEI42602\VCRUNTIME140.dll
        • Size 86KB
        • SHA256 2100196b81e2c056aad70403e312393d1e3455c57893049e7e244b6efb09bdb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Windows\Temp\_MEI42602\_bz2.pyd
        • Size 70KB
        • SHA256 414b09558b917bf65053ae5cd73177a04c80ce528f4ecb2a4ab187addce7a097
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Windows\Temp\_MEI42602\_ctypes.pyd
        • Size 109KB
        • SHA256 78c5de582963eaa9143ea434e0daebd0e258b90859a246b87dedb51628fcf0c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Windows\Temp\_MEI42602\_lzma.pyd
        • Size 143KB
        • SHA256 b6f386aef6eee5ccdbb1268c91939b44cacab742f134911591a2702e1ac5ddca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Windows\Temp\_MEI42602\_socket.pyd
        • Size 65KB
        • SHA256 99eb75336cda64ac448265c362c9602ed982329b20e2c3270ad44b5bce801768
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Windows\Temp\_MEI42602\base_library.zip
        • Size 1.0MB
        • SHA256 e692723bee99f8e46fbf80099e9e5de7994f53d3bdd7cb79cce191e027ec8ebc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Windows\Temp\_MEI42602\libffi-7.dll
        • Size 25KB
        • SHA256 687a88229f6f2f2be875d31efeedda7e719e8a1066b03f5c0f63b83829549d63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Windows\Temp\_MEI42602\pyexpat.pyd
        • Size 182KB
        • SHA256 00b7b6391096044795c22f4dcf3a61c845eca9cfec29513da41935e65a73bce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Windows\Temp\_MEI42602\python3.DLL
        • Size 52KB
        • SHA256 52f1821ea53dff992ce24f1dfa71481db2eaf58dacaa7d5a0caacbeacaee019f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python310.dll

        • Path C:\Windows\Temp\_MEI42602\python310.dll
        • Size 4.2MB
        • SHA256 05e63d898372ff31ef7063e4f0d5d16c4f0e2b6ab732e505b838d209992de111
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Conakry

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Africa\Conakry
        • Size 148B
        • SHA256 d2efac4e5f23d88c95d72c1db42807170f52f43dd98a205af5a92a91b9f2d997
        • MD5 SHA1 SHA512 TLSH

        Djibouti

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Africa\Djibouti
        • Size 265B
        • SHA256 c89b2e253a8926a6cecf7eff34e4bfcdb7fe24daff22d84718c30deec0ea4968
        • MD5 SHA1 SHA512 TLSH

        Kigali

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Africa\Kigali
        • Size 149B
        • SHA256 93f19e9551d58868ae5820752d2c93a486124c364463dc9c9489d0458f8bc682
        • MD5 SHA1 SHA512 TLSH

        Lagos

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Africa\Lagos
        • Size 235B
        • SHA256 cffeb0282ccbd7fba0e493ff8677a1e5a6dd5197885042e437f95a773f844846
        • MD5 SHA1 SHA512 TLSH

        Curacao

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\America\Curacao
        • Size 246B
        • SHA256 8491e557ff801a8306516b8ca5946ff5f2e6821af31477eb47d7d191cc5a6497
        • MD5 SHA1 SHA512 TLSH

        Toronto

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\America\Toronto
        • Size 3KB
        • SHA256 820392cdb1e499f82ef704d0ccfd0c50ab2b28c6e0bdeb80793861d5e165d5ad
        • MD5 SHA1 SHA512 TLSH

        Greenwich

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Etc\Greenwich
        • Size 114B
        • SHA256 6d9f378883c079f86c0387a5547a92c449869d806e07de10084ab04f0249018d
        • MD5 SHA1 SHA512

        London

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Europe\London
        • Size 3KB
        • SHA256 c85495070dca42687df6a1c3ee780a27cbcb82f1844750ea6f642833a44d29b4
        • MD5 SHA1 SHA512 TLSH

        Oslo

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Europe\Oslo
        • Size 2KB
        • SHA256 5ee475f71a0fc1a32faeb849f8c39c6e7aa66d6d41ec742b97b3a7436b3b0701
        • MD5 SHA1 SHA512 TLSH

        Skopje

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Europe\Skopje
        • Size 1KB
        • SHA256 3a95adb06156044fd2fa662841c0268c2b5af47c1b19000d9d299563d387093a
        • MD5 SHA1 SHA512 TLSH

        PRC

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\PRC
        • Size 561B
        • SHA256 64ffc2e43a94435a043c040d1d3af7e92d031adc78e7737af1861baa4eeef3e6
        • MD5 SHA1 SHA512 TLSH

        Wallis

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Pacific\Wallis
        • Size 152B
        • SHA256 53268a8a6b11f0b8e02fc67683ae48d074efaf7b4c66e036c1478107afd9a7d7
        • MD5 SHA1 SHA512 TLSH

        Yap

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\Pacific\Yap
        • Size 172B
        • SHA256 9c1dfa1c15994dd8774e53f40cb14dcf529143468721f1dba7b2c2e14ae9f5f0
        • MD5 SHA1 SHA512 TLSH

        UCT

        • Path C:\Windows\Temp\_MEI42602\pytz\zoneinfo\UCT
        • Size 114B
        • SHA256 8b85846791ab2c8a5463c83a5be3c043e2570d7448434d41398969ed47e3e6f2
        • MD5 SHA1 SHA512

        select.pyd

        • Path C:\Windows\Temp\_MEI42602\select.pyd
        • Size 17KB
        • SHA256 e4e0542f20a63348219b8e5e39271f8913981dcff1f51be92202a456e80832b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Windows\Temp\_MEI42602\ucrtbase.dll
        • Size 1.3MB
        • SHA256 eb50b27100664004f019f7c5b41a7caa0a6b7d345f15d24ac3780709ff6bb90b
        • MD5 SHA1 SHA512 SSDEEP TLSH