Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/08/2026, 22:17

General

  • Target
    6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8.exe
  • Size 6.9MB
  • Sample260830-17c1js1dpd
  • SHA256 6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8.exe
    "C:\Users\Admin\AppData\Local\Temp\6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Users\Admin\AppData\Local\Temp\6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8.exe
      "C:\Users\Admin\AppData\Local\Temp\6929111436de76504a2526e5f4d16b2e7e47dccce7faaabba4182225fe98a5c8.exe"
      2⤵
      • Loads dropped DLL
      PID:3416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\_bz2.pyd
        • Size 84KB
        • SHA256 5ba872caa7fcee0f4fb81c6e0201ceed9bd92a3624f16828dd316144d292a869
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\_decimal.pyd
        • Size 273KB
        • SHA256 f4a486a0ca6a53659159a404614c7e7edccb6bfbcdeb844f6cee544436a826cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\_hashlib.pyd
        • Size 63KB
        • SHA256 14765e83996fe6d50aedc11bb41d7c427a3e846a6a6293a4a46f7ea7e3f14148
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\_lzma.pyd
        • Size 155KB
        • SHA256 6f48e7eba363cb67f3465a6c91b5872454b44fc30b82710dfa4a4489270ce95c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\_socket.pyd
        • Size 82KB
        • SHA256 8daefaff53e6956f5aea5279a7c71f17d8c63e2b0d54031c3b9e82fcb0fb84db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\base_library.zip
        • Size 1.3MB
        • SHA256 7c12923d125e2d3d7f60047fb080e6f888feab9d6a03dde982607282a1cb7ced
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\python313.dll
        • Size 5.8MB
        • SHA256 bf68cf819a1e865170430c10e91c18b427aef88db1da1742020443864aa2b749
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\select.pyd
        • Size 31KB
        • SHA256 baee284995b22d495fd12fa8378077e470978db1522c61bfb9af37fb827f33d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI20002\unicodedata.pyd
        • Size 694KB
        • SHA256 a67eec238162fde20ac24ca7df931792734aad0611be22d1b3a71bc15acf72f3
        • MD5 SHA1 SHA512 SSDEEP TLSH