Overview

overview

7

Static

static

5

Machine Party.exe

windows10-2004-x64

7

Machine Party.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/08/2026, 23:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Machine Party.exe
  • Size 9.5MB
  • Sample260818-3f5mlasfmf
  • SHA256 827f60c9f6f1c938c718de40d0dd34257efb6d330e379465079331b0560332a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks for any installed AV software in registry 1 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Looks up external IP address via web service 1 TTPs 4 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Machine Party.exe
    "C:\Users\Admin\AppData\Local\Temp\Machine Party.exe"
    1⤵
    • Checks for any installed AV software in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3796
    • C:\Program Files\7-Zip\7z.exe
      "C:\Program Files\7-Zip\7z.exe" a "-pAlles1234" -mhe=on -t7z -mx9 "C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\7b5b8d-Admin.7z" "C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\*"
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3024
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4544
    • C:\Users\Admin\AppData\Local\Temp\Machine Party.exe
      "C:\Users\Admin\AppData\Local\Temp\Machine Party.exe"
      1⤵
      • Checks for any installed AV software in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4708
      • C:\Program Files\7-Zip\7z.exe
        "C:\Program Files\7-Zip\7z.exe" a "-pAlles1234" -mhe=on -t7z -mx9 "C:\Users\Admin\AppData\Local\Temp\vg__dt0lah\7b5b8d-Admin.7z" "C:\Users\Admin\AppData\Local\Temp\vg__dt0lah\organized\*"
        2⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4212

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__dt0lah\organized\Other\Fingerprint\items.txt
          • Size 429B
          • SHA256 29303e689b7cc3c5f27040fc439994125c4a4b2749dc873e8395f2f81a924050
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__dt0lah\organized\Other\Processes\items.txt
          • Size 6KB
          • SHA256 3d2caae732762aaca4a1c0e04ba3fa3347d343f6a2290a16af3ad656794e0ff9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7b5b8d-Admin.7z
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\7b5b8d-Admin.7z
          • Size 8.1MB
          • SHA256 80d60501fe6fa5f40b3bdffaa2c84df45eb886da324774e273e10a5bc6b41fa7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Bookmarks.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Browser\Firefox\Bookmarks.txt
          • Size 367B
          • SHA256 4dc748ca7535f1c6a8cc1414733d9459457b3d2080a3a5e96386570af9a0647d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          CloseSend.rtf
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\CloseSend.rtf
          • Size 627KB
          • SHA256 b25c88127eebe5aeaccb566251299cf235b6856c3c61aefd6dcbb2e5b955a6f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompareConnect.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\CompareConnect.docx
          • Size 15KB
          • SHA256 2e821caadb0634485a4b76e700b5e2b8aed5e4ff2a4aebc71ea3ae23a05a6a99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConfirmImport.xlsx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\ConfirmImport.xlsx
          • Size 11KB
          • SHA256 4ee61e5d16c51931614c584da3d8097ce31110239b9ee3408c3fd1743fc61c14
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertConvertFrom.rtf
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\ConvertConvertFrom.rtf
          • Size 381KB
          • SHA256 0acd38acd0470513a9f38d89b72797fc6ffd2f09fe504722b06fcc33c5ee9aff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DebugDisable.rtf
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\DebugDisable.rtf
          • Size 2.2MB
          • SHA256 c3c29d55e7bc46cbedb3bc825448d06dd7735bef65675fc4219ab17b6ce4de80
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DenySwitch.xlsx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\DenySwitch.xlsx
          • Size 12KB
          • SHA256 1b35cc38b3c2154ecab9724fee0f8d92be605493905bd470fabeb3505551c4b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EnableRename.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\EnableRename.docx
          • Size 2.3MB
          • SHA256 ee66e958b7476dd256cdfcdd53e9a712e32c7121bec817f26e3baa72006c6fb0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ExpandConvertFrom.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\ExpandConvertFrom.docx
          • Size 15KB
          • SHA256 b3c895d4e9ebf3274549d2aba1b00383a84580418a302eeed7c840dd88377ce4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetRequest.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\GetRequest.docx
          • Size 19KB
          • SHA256 35288bcb946e32fd2ab5f8851b6e8f427a68b1decbee05a9f9c736f100eac04d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InstallBlock.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\InstallBlock.docx
          • Size 904KB
          • SHA256 4a3123f9d0ebba77d984248c694c1446c38060df778edb1af452c57e3e54d96a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InvokePush.csv
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\InvokePush.csv
          • Size 1.0MB
          • SHA256 e2049b450b8eed4467e157eee4609e94179e8feb34edf9907dd1c0952c8c1d4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RedoRename.xlsx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\RedoRename.xlsx
          • Size 12KB
          • SHA256 d56e4c639676b68c88f4c6ba5c89767f43a79e726ae7287ee56fb79d9a9958cb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RenameWait.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\RenameWait.docx
          • Size 768KB
          • SHA256 d714561348c78b6e3739a3ba2e8a8846e072dbe1dfd063990ac420249aa5e461
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResizeDeny.docx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\ResizeDeny.docx
          • Size 14KB
          • SHA256 fc6bda7bbed6775bd1f51e75c67f0a86e6207d5af21b752fbeb5f1f8be8d593c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SelectDebug.xlsx
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Common Files\Documents\SelectDebug.xlsx
          • Size 9KB
          • SHA256 89a025400215c5724c2ae96a52f56543c69050a8da2f0c8f22dffd47929ff05c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          email_clients.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Credentials\email_clients.txt
          • Size 205B
          • SHA256 7dcc1854a954cbd525d8dcdf17765281deb609889f5febaf9a1338a082cb3679
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Desktop.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Desktop.txt
          • Size 1KB
          • SHA256 5fd2c91c43c7b8d24bf40bd0d30ac9b31520c5005e70c76a6ed0ee245ed72a4c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Documents.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Documents.txt
          • Size 711B
          • SHA256 c879c5084d37fd458009b0bef9ba43a53856cf8adf3d751d837ffe845bba14ef
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Downloads.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Downloads.txt
          • Size 1KB
          • SHA256 5c79f574d0c4a191623312a7d6aa9d935c4efad4aca490ff00fd35de29991e94
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Music.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Music.txt
          • Size 861B
          • SHA256 d69566bbd372b19b397212aa76ee9ccce5db57afe4431b47657c681d0aa659c5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Pictures.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Pictures.txt
          • Size 1KB
          • SHA256 a6048ed01dd20cb031f56c6d5e0597023ee341b3b6f831b508c349235aae934f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Videos.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Directories\Videos.txt
          • Size 64B
          • SHA256 0168720facabf636d9307e93790f3326f5e32601d23b172a41e4436d8f0072ae
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Bookmarks\items.txt
          • Size 467B
          • SHA256 c96f18685c55242c5715b74af17c1a9358defc38120652c9438c9e7f830b9af5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Email\items.txt
          • Size 239B
          • SHA256 77479d4f5ca875c80ae7273fe538b05c286d9d95b18628d6afd67459f9ec4c06
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Environment\items.txt
          • Size 655B
          • SHA256 cbfd5193d1ef4b86fc1eae082846cbf813e2e48992a8e1b77510091398ece90f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Fingerprint\items.txt
          • Size 429B
          • SHA256 8b914fcf96777616eb823602b9bab0df68b93279464ebe0b713169be89b00bbb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Processes\items.txt
          • Size 6KB
          • SHA256 05bbac3d2e24f13324b56f2c101529c545882720ba499d677d4da7dd62b4628e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          items.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\Other\Software\items.txt
          • Size 2KB
          • SHA256 5a195eb70f8b570058793212cb263725822fa3fec2d54bfdbd8c5c366ad23186
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Antivirus.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\System\Antivirus.txt
          • Size 31B
          • SHA256 7b56726c474b8da981e067e36bcd5fbd9efcec4cadc69d2a1c416b9832eede97
          • MD5 SHA1 SHA512
          Submit Download

          MAC Addresses.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\System\MAC Addresses.txt
          • Size 34B
          • SHA256 fe954020f422e4f1a37b5ef802d7257a2e160a0a0832a286291ea86c4e152ffa
          • MD5 SHA1 SHA512
          Submit Download

          System Info.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\System\System Info.txt
          • Size 683B
          • SHA256 e097c8ea6de6953bcdae4637f6b7f3b9aae4dd2d40656b011ee8767d9098d5bf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Task List.txt
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\System\Task List.txt
          • Size 2KB
          • SHA256 17409afde87a2438204a28323b49eee71aa3fae6db1fa3265b6ae28584ac5e69
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          results.json
          • Path C:\Users\Admin\AppData\Local\Temp\vg__hh5j69l\organized\results.json
          • Size 34KB
          • SHA256 832d68b2f8aaf04eba985c27c43e2ce79e34d305224877df51edbc076f904819
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vg_cookies_18270375067745213518.db
          • Path C:\Users\Admin\AppData\Local\Temp\vg_cookies_18270375067745213518.db
          • Size 20KB
          • SHA256 de48f5c4308a2477450952a8fd6462c411cc966f9e0fb0065a252b3be831a482
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vg_ffcookies_3732380715753074556.db
          • Path C:\Users\Admin\AppData\Local\Temp\vg_ffcookies_3732380715753074556.db
          • Size 96KB
          • SHA256 33a2357af8dc03cc22d2b7ce5c90abf25ac8b40223155a516f1a8df4acbf2a53
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          void_af_551632299.db
          • Path C:\Users\Admin\AppData\Local\Temp\void_af_551632299.db
          • Size 224KB
          • SHA256 d781b56555e65272ef4019de8706cba5042fb7afcf0f6e2ca56183ca9567ba8e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          void_hist_998639984.db
          • Path C:\Users\Admin\AppData\Local\Temp\void_hist_998639984.db
          • Size 204KB
          • SHA256 8c24b66b55bef2d89d1ac69204ec3d5d7b191ba051c7c4c4cddcd66d92575d04
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download