Overview

overview

7

Static

static

3

AmongUsLauncher.exe

windows10-2004-x64

7

AmongUsLauncher.exe

windows11-ltsc_2024-x64

7

test.pyc

windows10-2004-x64

3

test.pyc

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    49s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/08/2026, 02:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AmongUsLauncher.exe
  • Size 37.6MB
  • Sample260819-czvcvscp21
  • SHA256 4d97f3ee55b2fc71822d637b32a9e15cc69c37e040c3fbe5ee56391c532a885b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 33 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:828
    • C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe
      "C:\Users\Admin\AppData\Local\Temp\AmongUsLauncher.exe"
      2⤵
      • Loads dropped DLL
      PID:3148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\PIL\_imaging.cp313-win_amd64.pyd
        • Size 2.4MB
        • SHA256 010808cd1eb564aeaee8ba65ab2e20ae07f9bd9cbab8dba1d88931bc6842de0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _brotli.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_brotli.cp313-win_amd64.pyd
        • Size 804KB
        • SHA256 67dfa82dcaed04ed3f358d84b18d1375d59126161de92e00164d36087b179d4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_bz2.pyd
        • Size 83KB
        • SHA256 449058efc99fccb9e24d640084d845c78f3f86dd34c5c126cf69e523d6320d75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_ctypes.pyd
        • Size 130KB
        • SHA256 5c0d5082fba1a2a3eb8d5e23073be25164c19f21304b09cecaab340dc7198815
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_hashlib.pyd
        • Size 63KB
        • SHA256 52f29aebe9886e830dedc363cd64eb53b6830d84b26e14f1b6faa655a0900b5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_lzma.pyd
        • Size 155KB
        • SHA256 48f16b587c6faa44a9e073365b19599200b0f0a0ccb70121e76c2dac4ed53281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_queue.pyd
        • Size 34KB
        • SHA256 af8ac8ab8b39f53b5dc192fbf58ad704a709db34e69753b97b83d087202e3a36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_socket.pyd
        • Size 83KB
        • SHA256 bced17d6f081d81ea7cd92f1e071e38f8840e61ee0fe1524221b776bcfa78650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_ssl.pyd
        • Size 177KB
        • SHA256 3301ff340d26495c95108199b67fdf3402742d13070af8b6bf4eb2e0c5e13781
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_tkinter.pyd
        • Size 67KB
        • SHA256 7d163581822bdcdb94cee24115c37a511cb6bd880b007fc7e5cc5099fac58506
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\_wmi.pyd
        • Size 38KB
        • SHA256 ebd252d21af9c84128fca04c994093a5bd6ee857f1581f06f4026fdd6a2c40e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\base_library.zip
        • Size 1.3MB
        • SHA256 9d1f77dcc45ebff6144c48d1b5aa38bb6304f4524c6b0bf7bd4419abde4de53f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\certifi\cacert.pem
        • Size 284KB
        • SHA256 2089fc5a25836401faee99f722460b01b393999746a0fb817943666d6ecc0458
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\charset_normalizer\md.cp313-win_amd64.pyd
        • Size 10KB
        • SHA256 76c8700ffc983bbec07468e354039b21e25e49e7c19f43d7343994c90d4bb7bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\charset_normalizer\md__mypyc.cp313-win_amd64.pyd
        • Size 122KB
        • SHA256 e9c308245fe01d33ef92c7026115a0a930fd865fbe1bfcefa91e76c6aa32a0b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\pyexpat.pyd
        • Size 200KB
        • SHA256 554bbc65bfe8c19ba9bbd94f18977a8131109c6a4d64306778bd12250c2c5c56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\python3.DLL
        • Size 69KB
        • SHA256 fdd54b6c495e9278e73d68203fff0c300e416e704852908cf5b06666cffead51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\python313.dll
        • Size 5.8MB
        • SHA256 69fd86ea29370697c203f7e12830084f920f490766a8e3045af52c036a9ad529
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\pywin32_system32\pythoncom313.dll
        • Size 665KB
        • SHA256 b06df90adb0d907aded57cc5fb98bdacb5e00dd018ca74e3e265c32a1af46d18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\pywin32_system32\pywintypes313.dll
        • Size 133KB
        • SHA256 90ba935a0145ee9ae56267a365cc0088d34fa506b7afeb2bd1bd78cd33359605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\select.pyd
        • Size 31KB
        • SHA256 6393121130a3e85d0f6562948024d8614c4c144b84ab102af711c638344d1599
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Lorem ipsum.txt
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\tcl86t.dll
        • Size 1.8MB
        • SHA256 137972bf582984df7ffe8983fa66d92dba6cc5887fe6784ffe1165bab57304b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\tk86t.dll
        • Size 1.5MB
        • SHA256 ddc6b69c3897ddf3ea9fdfb4b4a6b9c3a667958d4dbf6b4bbcc50c93eb341370
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\unicodedata.pyd
        • Size 695KB
        • SHA256 071494856fdad0042964769aa2fb1de4ea95c2cfcbe27cc7132293c68d13d710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\win32\win32api.pyd
        • Size 130KB
        • SHA256 b1b1bb33af9cc14749936b1f6bac36b2ffc494ec1a5fb8b12fc9180a6454f545
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32event.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\win32\win32event.pyd
        • Size 28KB
        • SHA256 f4948bb80dbb97bd5f21aef753d984a3a0115f3c9b355b002b7a7edd2f6af86f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI8282\zlib1.dll
        • Size 144KB
        • SHA256 f687e5dd99faab1023d036f09ef8ba3c09bd3464c8ced523341780e301bdf6a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3148-1079-0x00007FFCD3F00000-0x00007FFCD3F29000-memory.dmp
        Download