Overview

overview

7

Static

static

3

AmongUsLauncher.exe

windows10-2004-x64

7

AmongUsLauncher.exe

windows11-ltsc_2024-x64

7

test.pyc

windows10-2004-x64

3

test.pyc

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    36s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/08/2026, 02:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AmongUsLauncher.exe
  • Size 37.6MB
  • Sample260819-czvcvscp21
  • SHA256 4d97f3ee55b2fc71822d637b32a9e15cc69c37e040c3fbe5ee56391c532a885b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 33 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3316
    • C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe
      "C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe"
      2⤵
      • Loads dropped DLL
      PID:4488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_asyncio.pyd
        • Size 70KB
        • SHA256 a5341a74bbec1ddc807c0236fcb6bfaceaf3b957eb69cdd9bca00657eb5e42b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _brotli.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_brotli.cp313-win_amd64.pyd
        • Size 804KB
        • SHA256 67dfa82dcaed04ed3f358d84b18d1375d59126161de92e00164d36087b179d4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_bz2.pyd
        • Size 83KB
        • SHA256 449058efc99fccb9e24d640084d845c78f3f86dd34c5c126cf69e523d6320d75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_cffi_backend.cp313-win_amd64.pyd
        • Size 175KB
        • SHA256 0e3d149b91fc7dc3367ab94620a5e13af6e419f423b31d4800c381468cb8ad85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_ctypes.pyd
        • Size 130KB
        • SHA256 5c0d5082fba1a2a3eb8d5e23073be25164c19f21304b09cecaab340dc7198815
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_decimal.pyd
        • Size 273KB
        • SHA256 4e27c06b84401039d10f800a0f06446b58508784ee366c7c8324d8fe9794e1a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_elementtree.pyd
        • Size 132KB
        • SHA256 fe09d0408aab3a6faa71467f78433df4c7f3ad0b033bb72ec43bde85abf6dcfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_hashlib.pyd
        • Size 63KB
        • SHA256 52f29aebe9886e830dedc363cd64eb53b6830d84b26e14f1b6faa655a0900b5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_lzma.pyd
        • Size 155KB
        • SHA256 48f16b587c6faa44a9e073365b19599200b0f0a0ccb70121e76c2dac4ed53281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_multiprocessing.pyd
        • Size 37KB
        • SHA256 82253e2d6ec717b317e26ed7dd141aadaea6cb55a9d0fee022a67d52b404fd06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_overlapped.pyd
        • Size 55KB
        • SHA256 7983f811ccd9c99c6db34b653339605ea45eb384f5e88a8b23ccf9fa5f0170d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_queue.pyd
        • Size 34KB
        • SHA256 af8ac8ab8b39f53b5dc192fbf58ad704a709db34e69753b97b83d087202e3a36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_socket.pyd
        • Size 83KB
        • SHA256 bced17d6f081d81ea7cd92f1e071e38f8840e61ee0fe1524221b776bcfa78650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_ssl.pyd
        • Size 177KB
        • SHA256 3301ff340d26495c95108199b67fdf3402742d13070af8b6bf4eb2e0c5e13781
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_tkinter.pyd
        • Size 67KB
        • SHA256 7d163581822bdcdb94cee24115c37a511cb6bd880b007fc7e5cc5099fac58506
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\_wmi.pyd
        • Size 38KB
        • SHA256 ebd252d21af9c84128fca04c994093a5bd6ee857f1581f06f4026fdd6a2c40e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\base_library.zip
        • Size 1.3MB
        • SHA256 9d1f77dcc45ebff6144c48d1b5aa38bb6304f4524c6b0bf7bd4419abde4de53f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\certifi\cacert.pem
        • Size 284KB
        • SHA256 2089fc5a25836401faee99f722460b01b393999746a0fb817943666d6ecc0458
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\charset_normalizer\md.cp313-win_amd64.pyd
        • Size 10KB
        • SHA256 76c8700ffc983bbec07468e354039b21e25e49e7c19f43d7343994c90d4bb7bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\charset_normalizer\md__mypyc.cp313-win_amd64.pyd
        • Size 122KB
        • SHA256 e9c308245fe01d33ef92c7026115a0a930fd865fbe1bfcefa91e76c6aa32a0b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\pyexpat.pyd
        • Size 200KB
        • SHA256 554bbc65bfe8c19ba9bbd94f18977a8131109c6a4d64306778bd12250c2c5c56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\python3.dll
        • Size 69KB
        • SHA256 fdd54b6c495e9278e73d68203fff0c300e416e704852908cf5b06666cffead51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\python313.dll
        • Size 5.8MB
        • SHA256 69fd86ea29370697c203f7e12830084f920f490766a8e3045af52c036a9ad529
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\pywin32_system32\pythoncom313.dll
        • Size 665KB
        • SHA256 b06df90adb0d907aded57cc5fb98bdacb5e00dd018ca74e3e265c32a1af46d18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\pywin32_system32\pywintypes313.dll
        • Size 133KB
        • SHA256 90ba935a0145ee9ae56267a365cc0088d34fa506b7afeb2bd1bd78cd33359605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\select.pyd
        • Size 31KB
        • SHA256 6393121130a3e85d0f6562948024d8614c4c144b84ab102af711c638344d1599
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Lorem ipsum.txt
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\tcl86t.dll
        • Size 1.8MB
        • SHA256 137972bf582984df7ffe8983fa66d92dba6cc5887fe6784ffe1165bab57304b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\tk86t.dll
        • Size 1.5MB
        • SHA256 ddc6b69c3897ddf3ea9fdfb4b4a6b9c3a667958d4dbf6b4bbcc50c93eb341370
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\unicodedata.pyd
        • Size 695KB
        • SHA256 071494856fdad0042964769aa2fb1de4ea95c2cfcbe27cc7132293c68d13d710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\win32\win32api.pyd
        • Size 130KB
        • SHA256 b1b1bb33af9cc14749936b1f6bac36b2ffc494ec1a5fb8b12fc9180a6454f545
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32event.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\win32\win32event.pyd
        • Size 28KB
        • SHA256 f4948bb80dbb97bd5f21aef753d984a3a0115f3c9b355b002b7a7edd2f6af86f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33162\zlib1.dll
        • Size 144KB
        • SHA256 f687e5dd99faab1023d036f09ef8ba3c09bd3464c8ced523341780e301bdf6a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4488-1079-0x00007FFD92A80000-0x00007FFD92AA9000-memory.dmp
        Download