Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/08/2026, 18:20

General

  • Target
    LACERZZ.exe
  • Size 11.7MB
  • Sample260827-wysmeszbmd
  • SHA256 ffdc7a0a8b067a05013e70d9cedde4be77d74557a866a64db08f08f2a3eda41c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 14 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LACERZZ.exe
    "C:\Users\Admin\AppData\Local\Temp\LACERZZ.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2452
    • C:\Users\Admin\AppData\Local\Temp\LACERZZ.exe
      "C:\Users\Admin\AppData\Local\Temp\LACERZZ.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1564
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c
        3⤵
        • Executes a command shell one-liner
        PID:1940

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\VCRUNTIME140.dll
        • Size 95KB
        • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_asyncio.pyd
        • Size 60KB
        • SHA256 2c9f565254e4b2744d52b58f4960d5da1330c7846059b772044e4415804d933e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_bz2.pyd
        • Size 78KB
        • SHA256 31dd9bfb64b1bee8faf925296028e2af907e6d933a83ddc570ebc82d11c43cfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_ctypes.pyd
        • Size 117KB
        • SHA256 b545db2339ae74c523363b38835e8324799720f744c64e7142ddd48e4b619b68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_decimal.pyd
        • Size 242KB
        • SHA256 4f1ecc777c30df39cd70600cd0c9dc411adb622af86287b612f78be2a23b352c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_hashlib.pyd
        • Size 60KB
        • SHA256 9da79abfed52c7432a25a513f14134f3782c73ec7142e2d90223610eaef54303
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_lzma.pyd
        • Size 151KB
        • SHA256 75d450e973cd1ccbd0f9a35ba0d7e6d644125eb311cc432bb424a299d9a52ee0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_multiprocessing.pyd
        • Size 30KB
        • SHA256 b2d81c59e7ba45ce85f557c67a02ebbb01433136b6dd5075afcf115f57b73115
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _overlapped.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_overlapped.pyd
        • Size 45KB
        • SHA256 622171218fab2952c569acdbf0489d0098fa0664f61624d1c4f040410731be41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_queue.pyd
        • Size 27KB
        • SHA256 827a07b27121200ed9fb2e9efd13ccbf57ca7d32d9d9d1619f1c303fb4d607b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_socket.pyd
        • Size 74KB
        • SHA256 9558dda6a3f6ad0c3091d643e2d3bf5bf20535904f691d2bdb2ce78edf46c2da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\_ssl.pyd
        • Size 153KB
        • SHA256 41278e309382c79356c1a4daf6dbb5819441d0c6e64981d031cda077bb6f1f79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\base_library.zip
        • Size 859KB
        • SHA256 990a2d93f763e263d60d250dc0f5bce8b908e2a75e57c92d71d9b7d01a01681a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\libssl-1_1.dll
        • Size 682KB
        • SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\pyexpat.pyd
        • Size 191KB
        • SHA256 e41cff213307b232e745d9065d057bcf36508f3a7150c877359800f2c5f97cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python310.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\python310.dll
        • Size 4.2MB
        • SHA256 5783c5c5a3ffce181691f19d27de376a03010d32e41360b72bcdbd28467cfcc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\select.pyd
        • Size 26KB
        • SHA256 149427a8d58373351955ee01a1d35b5ab7e4c6ac1a312daa9ba8c72b7e5ac8a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24522\unicodedata.pyd
        • Size 1.1MB
        • SHA256 0f27f26d1faa4f76d4b9d79ad572a3d4f3bbe8020e2208d2f3b9046e815b578a
        • MD5 SHA1 SHA512 SSDEEP TLSH