Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/08/2026, 00:22
Behavioral task
behavioral1
Sample
mytweak_pc_optimizer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
mytweak_pc_optimizer.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
mytweak.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
mytweak.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target mytweak_pc_optimizer.exe
- Size 12.0MB
- Sample260825-apavcs1tht
- SHA256 b25bc15f4c2489582a2345c438a09722b41a6c8806675a3f5e5c5661b96909ab
- MD5 a6b25c8bb52ddf602c779c622fd6a0c0
- SHA1 52a6aab0acba7e366f8be1b0008c05b0b54cce58
- SHA512 31b9f9282f794772604f40bd8834a611469bfe555064371153963c0f9ba58394b731e72c3fa2a5a5a25d9e7c3b316516efbc6e59a20f1cc9cf141a287c263587
- SSDEEP 196608:G+I/RYKXEpXnH2ph1iutexSiLCw10+u41ZPcUNS/gbeHV5PTmCY+g7tysvonYpP2:rI/rXEAphVtk510MjNSoiHVBSC7AysvT
- TLSH T18EC63368BB6051FAE9BB403E8CA79451A6E332160752E3DF2B9005653F271F08D7CBB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 12 IoCs
pid Process 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5028 mytweak_pc_optimizer.exe 5028 mytweak_pc_optimizer.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3256 wrote to memory of 5028 3256 mytweak_pc_optimizer.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\mytweak_pc_optimizer.exe"C:\Users\Admin\AppData\Local\Temp\mytweak_pc_optimizer.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3256 -
C:\Users\Admin\AppData\Local\Temp\mytweak_pc_optimizer.exe"C:\Users\Admin\AppData\Local\Temp\mytweak_pc_optimizer.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:5028
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\VCRUNTIME140.dll
- Size 174KB
- SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
- MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
- SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
- SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
- SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
- TLSH T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\_bz2.pyd
- Size 86KB
- SHA256 b938073c85cf6b9fe80556d7899ed1901e5e60b7adea2832442376239fb36b36
- MD5 4cc74cced07914bd71dc9c4d2a3f127a
- SHA1 77bda774eff7c8afc94892d2d5d63dd3c80f9ea4
- SHA512 8f81a5287bc5f59eeb6bb6703c00495cf761816e6eb20b6cb401af20040464fffc5b5e95d21b49d6260debb9cfac4031cf87b5248c0077fa8edd0d390cc1910b
- SSDEEP 1536:+/BvOKz7hvAKyRXzgwnZpfzyONpGX/4TjW8hSlUbrjvUIp3VJyPs5i9EfIY+8i:YBvLztGRXHyONpE/ajhwYXUIp3VGV
- TLSH T185838E87E3A463F6F6AB81B4D6810753E730BB460750A3AFB24482853F23F91AE59355
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\_ctypes.pyd
- Size 139KB
- SHA256 408cc4e7a22ffa418ca52f5e13fe9268a3c50a2bc9de02b0530b555ef591bc5a
- MD5 659510afbc97992af071a0e2a75545ef
- SHA1 ec7dba6821ccc0e6b9f851d39812e0de3627130b
- SHA512 76a243fb96129041bccf92c2e231efdb53aba519bb26d919dc8b213e949fc0534448bf75400702c03850abb7cd24b1cbd37e0d0c76615a34248615aa44cde4d1
- SSDEEP 3072:e/n1qQ8rqSN56EBZSQ4ED1O/IxswJQW2DfrFAIpGPMS:on1Jb86JE0/IxfSvF6
- TLSH T149D38F4B736840E6DA678138C6739E47EBB1F4511A1087CF02A4C99B1F637A2AE3F715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\_lzma.pyd
- Size 157KB
- SHA256 d2abf8db7fb0cf6285663b177991691a41b37e215c3d71fd087a98d8ec1bee63
- MD5 e882005d06af06ef17b2338342b3f41e
- SHA1 96dfac53ce267a9dd4d094bf5c5a665bc1cedfe9
- SHA512 1e53c3501796da814f75ba8fc683720e968c5944fbeb2b9836c48a6656df0da120c075bc6c17ea788efa14be11f29172e80c64febe72e43502a02f707a5928dd
- SSDEEP 3072:NJ66g4T5QW7JfyjEqkSkA51b4rznfJ9mNoVUIsbUIpI1yUx1:NUR4Tp4QPZ8N4nxYOIbHy
- TLSH T1FDF34C86B794F0E6F7328C78D2614F57E6F5781A0320929A01CC976D2B1FB759A2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\_tkinter.pyd
- Size 69KB
- SHA256 ee3eb2cdac591821cf71cda8035a6bc9b148d92996dd45b24e3ae3715613315d
- MD5 3fa21737ba104b04ad3cc69d96885d47
- SHA1 06eb875339b8f1bb6f1d1fa429d4374ed1a5d210
- SHA512 b7a30ed377247ac32c84253b2f46052c0177e5d5e7c9156a5c89d8ebd02a6e1967bb3b73a76dfe44e7ebe7c307eedbc64cd108f6875fc552f575b7adeb2a6f83
- SSDEEP 1536:a3rQ5jzPC333f/x6pY33mZgZ0+jcIpDSJyPs5i9ENfIbHfnUn:a3sJD233syGZgLcIpDSNOTw
- TLSH T120636D9B6764008AFDA3D139C6729F53E5B5F9521A20824F40A4C39A0F373F3A7BA751
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\_zstd.pyd
- Size 491KB
- SHA256 33c6eca99470c3eb9d776b617c550ad41b002a668336f062a9ab7be677a7409a
- MD5 fee9e34fa16e0ff378c281202a78d003
- SHA1 d8681b1ecf3776d1f095ecb738210423bcfec287
- SHA512 766fa08c57cb9e000237a5690e6bae8fbe2d2fb79fdf39f1a2f07ec668ee225df9675c9041d4b26410cbb4fb341693454dbcad722bcff3e78321412e0bfcf4ae
- SSDEEP 6144:HoRvcMPHwrJqB2l1eUVcXmgqCBdBwzKhThruVxzeeVUL2LzMYZpzBYQFE95+SClu:IRFcemgqKP2eeVC2Lz9kQe95BCl9Vmxp
- TLSH T1C2B48D43F29943EDE53BC4B8CF465A13FBB1780B1214965B97A5CB993F07B309A69308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\base_library.zip
- Size 1.3MB
- SHA256 e5186b33d96bf630799eb4af53aec570360cb930cffaf0a14a25c17f0c4d4677
- MD5 89a813ce2a7d16f93d455b3b63169bf0
- SHA1 8565671c1b06247cd2955db3fea9d8dc15fd07db
- SHA512 470ad0a70a8b0b9f2ae9650c856fe47bde48bee664b74108e5e49dbd057cc119767cb143fabff5aa8255c17da088ecf41c5d05f9f681830d2c3f390e52c8bc2f
- SSDEEP 24576:auUFFdeDZMXiLxfRZCYdalbSQeOdP2m2df2X:auUFFdeBRQYh/0
- TLSH T15E552B91B9917967FEC9F37A35B75A0CA715C0109B20D303B4A88DAC6FDF260AE558CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\libtommath.dll
- Size 79KB
- SHA256 2d760fefb452665b6af8c8d9d29f3a8378f10fc0847cdd9938ea0cb5edf1d573
- MD5 d905551350a3d711a5e72a284a07997b
- SHA1 4eb1261e90e19d241893e486aba6747a74d8b97f
- SHA512 35c92d493efe9a2296ba94a4e6851132ad826dfc749bce3fa9bdc9352855aae9bc57521e79ce7f49cfbf486bc15d5c767ed50ee70d966d568d639176350b689d
- SSDEEP 1536:03RaimSoWEBrh2as3iwaOasKuWoSvMD9NN:KqWEBkL3iwvrD9NN
- TLSH T184833907F6C620FEC05AD1B6C70A5322A6A2B8239B267BDF23016E255D55FD06F3F251
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\mytweak_config.json
- Size 41B
- SHA256 d113194e08d8fc4fe9efccd9e0020f754cff55ca3deaa795b1c5d1b935fef778
- MD5 f32a4d46d12ac58c3cd25cadf168dd5b
- SHA1 0a0ef3a7a9fa1232da803768631118c3c7af083f
- SHA512 fe99be803f8b5869cab94d1e0f065415f965147cd115b6b35f9a78010dd697ad595d33fb6648302a24506f264546ea40d6639e074883f4142a8ed26562413a60
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\mytweak_icon.ico
- Size 13KB
- SHA256 e81e08a23a6bba3cd9301251166c58290fc8912a374573e2320ba9777a23ee76
- MD5 d0d321021d5e2394f00fe56eb37bbb5e
- SHA1 dc66159af50f2264c17c4d969603ae3e0d3432b2
- SHA512 b66d894b3db364bda009c698b5f5f5921d4fda40c86dd5fbfac3eddc15d2d2173afd561bd7ef9c23bc8c494f84fb21e1ca261bcf4f15133891b7e949d7140523
- SSDEEP 384:52+VQ9bAJ6d3MHEpf4LkM4uLXWaBMMHzwf:ou8bAe3oErAW2HA
- TLSH T1E352DF8F70F85DBECAA05E78E5590210F33B65A74924C06C5313F572AF4A67899AEB02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\python314.dll
- Size 6.5MB
- SHA256 0f9857ffdfe010fe6b99328d58c2e3c7472ce75f336bf9c2ad9bd5bca3bce700
- MD5 689a9724a63fb3b4f209c771c31d8a05
- SHA1 2f88e8e16a9086e7974da71914fe4e89cd2eff9a
- SHA512 0c96ec1b9ef6e56f29202681272c1062ea49867757c966ebdd050c513d4988cfab7cd6c31e1d94f438c1412b38f7b446af1629b2776c41d712051ab70054ac9f
- SSDEEP 98304:xEQucV/qdDSSmJBA3ICXmRaJtv3vyHDMiE4rofB:xEQucVygSmJBA3InSiFG
- TLSH T19F668D26737515A4D8BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\tcl90.dll
- Size 3.2MB
- SHA256 a1fb45f963b05cb083a97df1449c2023b484eb921d40a463da7501b0f60e0f70
- MD5 9bba592e4cf79745bad7d5ea9fd3c347
- SHA1 b9c21bde58be54333529c49d91c6a419e55abc6c
- SHA512 cb3f99cf47e7fa9a1bc124d5ee1b061bf3f13d9afd575a49040d3d4f03775b702d8a2e08b33e4ecfebceeebe334958b89d7ad0e6378f37768b142adebe4d0d75
- SSDEEP 49152:JLtprceZwI8raQOc9GEVDUCjTCFva4v5XjqAoFRqux9umJSw+wnxq3BfXAqUcugz:NWrPOVNFFvsJnNKfXAqRGYYM
- TLSH T1F2F5AE46EBA40068D5B7C27CC61ACD5BDFB274581364AADB14E05B612F73FD2237A322
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\tcl9tk90.dll
- Size 2.0MB
- SHA256 31f625c52e65d29d126e710ed8bab2ec964cb770e4fc59bc329dfff02cb6ddcf
- MD5 f07870b32f577cf36256def49d360787
- SHA1 c6311ef53589dc7937b4b2cf70782a785ab00f92
- SHA512 0e2ba98202d3610601298bde13de16dbc80d894c5b3d6f415f7d477b676d317eaa706d005b84e4884e1811dfb2366dec080857853f7fb52ad0e1244efa04c467
- SSDEEP 49152:q/DN5QCQ7T3hJ00UYaut3HZbJTzdMltYxGaN+VH/GMU6y:os7+8JToVH+MQ
- TLSH T11FA55B06E2A88098C067967CCE2761AFEBF13C04975956DF6191BE9D7F73BE1073A210
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI00000cb82\zlib1.dll
- Size 100KB
- SHA256 f07195206534ebb1fe75093d4ec6c54a7a9227281b0c09d2113465b71da9e900
- MD5 1377669a18e22b364fb390504e49260a
- SHA1 e42eb7900b11f952ce0cd808fb6e1662fe25c373
- SHA512 80538f4c1a64d3b8b0329610c44a2c61d696f4e880a61b935047e2291edcea29ab4bbb0c0a9af9247051690823d7699728ebb4474ac1639317af0c70e830f124
- SSDEEP 1536:zeKwGDT0PvmR462JPHiW3beTnaYMSy6W2geD2onVs4iC+5VVRn6dhjIOXws+fB:aNGH+X34najvon8PVh2FXws+Z
- TLSH T195A37D47799620ADC1BBC231D6E61B21E6B638400B2D1BE74284E7752F02FD06F797E9
- MD5 SHA1 SHA512 SSDEEP TLSH