Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/08/2026, 01:11

General

  • Target
    ᵇʸᵖᵃˢˢ⳻᷼⳺.exe
  • Size 9.0MB
  • Sample260822-bkbrjaea26
  • SHA256 76a2840f69f6bf92f9f855391758150e994bb9f1fe9f6f2d8c0a8921d5a73665
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Loads dropped DLL 15 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ᵇʸᵖᵃˢˢ⳻᷼⳺.exe
    "C:\Users\Admin\AppData\Local\Temp\ᵇʸᵖᵃˢˢ⳻᷼⳺.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:996
    • C:\Users\Admin\AppData\Local\Temp\ᵇʸᵖᵃˢˢ⳻᷼⳺.exe
      "C:\Users\Admin\AppData\Local\Temp\ᵇʸᵖᵃˢˢ⳻᷼⳺.exe"
      2⤵
      • Drops file in Drivers directory
      • Loads dropped DLL
      PID:3268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_bz2.pyd
        • Size 84KB
        • SHA256 9483c4853ca1da3c5b2310dbdd3b835a44df6066620278aa96b2e665c4b4e86b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_ctypes.pyd
        • Size 123KB
        • SHA256 1548506345d220d68e9089b9a68b42a9d796141eb6236e600283951cb206eaa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_hashlib.pyd
        • Size 64KB
        • SHA256 7936413bc24307f01b90cac2d2cc19f38264d396c1ab8eda180abba2f77162eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_lzma.pyd
        • Size 159KB
        • SHA256 4797aaf192eb56b32ca4febd1fad5be9e01a24e42bf6af2d04fcdf74c8d36fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_queue.pyd
        • Size 28KB
        • SHA256 b0bd6330c525b4c64d036d29a3733582928e089d99909500e8564ae139459c5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_socket.pyd
        • Size 78KB
        • SHA256 241db349093604ab25405402ba8c4212016657c7e6a10edd3110abeb1cc2e1ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\_ssl.pyd
        • Size 151KB
        • SHA256 31c95af04a76d3badbdd3970d9b4c6b9a72278e69d0d850a4710f1d9a01618d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\base_library.zip
        • Size 781KB
        • SHA256 f22c9545970e2e5528e6816e386bdbbdd9546c5f73d51d2d1768c5a2fdbed1ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 664c3e52f914e351bb8a66ce2465ee0d40acab1d2a6b3167ae6acf6f1d1724d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\libssl-1_1.dll
        • Size 678KB
        • SHA256 b7c0e42c1a60a2a062b899c8d4ebd0c50ef956177ba21785ce07c517c143aeaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\python3.DLL
        • Size 58KB
        • SHA256 84cb29052734ec4ad5d0eac8a9156202a2077ee9bd43cabc68e44ee22a74910a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python39.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\python39.dll
        • Size 4.3MB
        • SHA256 e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\select.pyd
        • Size 28KB
        • SHA256 5361da714a61f99136737630d50fa4e975d76f5de75e181af73c5a23a2b49012
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI9962\unicodedata.pyd
        • Size 1.1MB
        • SHA256 ba6606dcdf1db16a1f0ef94c87adf580bb816105d60cf08bc570b17312a849da
        • MD5 SHA1 SHA512 SSDEEP TLSH