Overview

overview

7

Static

static

3

a2218365a9...d3.exe

windows10-2004-x64

7

a2218365a9...d3.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 23:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3.exe
  • Size 9.9MB
  • Sample260910-313nqszvd1
  • SHA256 a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3.exe
    "C:\Users\Admin\AppData\Local\Temp\a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5612
    • C:\Users\Admin\AppData\Local\Temp\a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3.exe
      "C:\Users\Admin\AppData\Local\Temp\a2218365a9f104d65c9d3150e5f6c3db26b9303bedad943c9ae2737adac3fad3.exe"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:3364

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\VCRUNTIME140.dll
        • Size 88KB
        • SHA256 bf33857f46e56ea7930c1eea25c5f7175a6aaa3df36bf8301a785e6ca726a0b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_bz2.pyd
        • Size 82KB
        • SHA256 845145052b5aa2d7ea89a4cd22816c7b2ef1cc8611624fcec526c13dd9e549fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_ctypes.pyd
        • Size 123KB
        • SHA256 fc2b999a4f937c0e45047e232faef56641d07c66d5e769d53311b8edf2432184
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_hashlib.pyd
        • Size 53KB
        • SHA256 314172700d50400c3c82734f9cd2e2db8bc1aa721caa808068609c78831713e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_lzma.pyd
        • Size 145KB
        • SHA256 7e947deaba8bf89003cb31d3e3bf4f3a15dca85a0b484b1718bcec7d1414bd96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_queue.pyd
        • Size 31KB
        • SHA256 2344ca83abadeed7d9dbbf7e1a9f5885785d6c7c37d9e2edd30ad0e9d872ae45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_socket.pyd
        • Size 75KB
        • SHA256 160ae199d1d615836723f2936690a8316c89a809e3f6baa02d520f082bedf5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_ssl.pyd
        • Size 160KB
        • SHA256 c0b767cfb37a4bfcb1fc52b115dd21b598447f9bb60abe3f961f99f971fd6c74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_wmi.pyd
        • Size 34KB
        • SHA256 7255f84f97ad0c00b1881bf35c97d122c887f1ac6c0a8d4e91e1ab7f29ed3669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\_zstd.pyd
        • Size 406KB
        • SHA256 ee4dba8d0861c192ef1d1835fac0d0611e7b53b24fe6448de4575d3dff8f05b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\base_library.zip
        • Size 1.2MB
        • SHA256 4e8cde447099ac124539b811d726174eeb80d8b8f59a1ddcae386ca47b19efc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp314-win32.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\charset_normalizer\md.cp314-win32.pyd
        • Size 9KB
        • SHA256 7f466de0ed1ed574857501bc8880a86e6d50fc8c72139dd838b697ab7e4af39a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp314-win32.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\charset_normalizer\md__mypyc.cp314-win32.pyd
        • Size 104KB
        • SHA256 59962ae75c4c8f2739bff66b6e4fe92d50f13aeb3ed38e218d4fa013919c206b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\libcrypto-3.dll
        • Size 3.3MB
        • SHA256 64a65ca297a879839e436269d1f8a257b7411d667c0988a4fbcd56729543d632
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\libffi-8.dll
        • Size 34KB
        • SHA256 b982741576a050860c3f3608c7b269dbd35ab296429192b8afa53f1f190069c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\libssl-3.dll
        • Size 624KB
        • SHA256 8dd682b158496623237d0d2acdd24156b791d91cbf0705a013a52137a7b3ae22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\python314.dll
        • Size 5.6MB
        • SHA256 dd01ebf3b848e4924e3e5a369334efecad300ebb329d0451c8d14bb30547cd06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\select.pyd
        • Size 29KB
        • SHA256 949b2496d96fdb1164d649a3a478057397e15e84d9581786b965e61507a8242f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Lorem ipsum.txt
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56122\unicodedata.pyd
        • Size 731KB
        • SHA256 01fe5d6f4cc4cdd22cae865af8673bc69a51c891faccb7ee34c977049f862f2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download