Overview

overview

7

Static

static

3

drive2.exe

windows10-2004-x64

7

drive2.exe

windows11-ltsc_2024-x64

7

Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • user interaction
    yes
  • max time kernel
    12s
  • max time network
    15s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 05:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    drive2.exe
  • Size 16.5MB
  • Sample260910-gn4jlsfg65
  • SHA256 83f46554162ba7de02ecea9151787024b8b8f4c01eab2452a6e2df2e25225dc0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 38 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\drive2.exe
    "C:\Users\Admin\AppData\Local\Temp\drive2.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3104
    • C:\Users\Admin\AppData\Local\Temp\drive2.exe
      "C:\Users\Admin\AppData\Local\Temp\drive2.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2216

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\_bz2.pyd
        • Size 86KB
        • SHA256 b938073c85cf6b9fe80556d7899ed1901e5e60b7adea2832442376239fb36b36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\_ctypes.pyd
        • Size 139KB
        • SHA256 408cc4e7a22ffa418ca52f5e13fe9268a3c50a2bc9de02b0530b555ef591bc5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\_lzma.pyd
        • Size 157KB
        • SHA256 d2abf8db7fb0cf6285663b177991691a41b37e215c3d71fd087a98d8ec1bee63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\_zstd.pyd
        • Size 491KB
        • SHA256 33c6eca99470c3eb9d776b617c550ad41b002a668336f062a9ab7be677a7409a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 768adf8caf2fa1e104bebc46e860522bb95c0396bb68ffa2104c6ab6a0892baf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 069144a8086f27b48f6eae6a190fc9b184f3e8e7bd42e120e279c2fc0fe0e97e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 2a492dc00a923573937f7a4957b305b853694f73af4bd8be7f51858344ac1ab5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 123ff3049d2e6b5539712b8c9f4c284e628d935b6473be502bcf0842e9eab02f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 6407aa9ea02f6878df909d23d31cdb22b15d2a5f6bdda98dde8fecd3d6af244f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 ec70172705f6d21bb7343d5e6ae7086f1ca39781dd2f1fba9fdd2f68898ba666
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 4851a58c52c9b235bb93289990dca16252dd64285c7acadb04dbc30b35cb35dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-file-l2-1-0.dll
        • Size 21KB
        • SHA256 af8333b31c6bf2aaf9aba3d602f23800cd78effb11aefc754ea49c02078769d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 6a84b05f4f452af7512f86552ceb19345a3081e753a8a66644f093fc70ad9a0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 cd3df0cb72fe9ed2b7a7e2193228fbcd6426652ef4efe6ddca58e5c7605b2d27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 ffe37dee48781181ab167c6c8e268caa608962f09bcf25a2f0f26dc9cda0e485
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 840a21fbfd105bf3b953da9c86a587a05af6462bb6a7ddf20ef492b85b16d219
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 52304ca0c260d9cd1f17573f82c92a2dc34d0d4180d03d381ea2b6629647304e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 2c84c74a22f4810adccc94e311d564a15ea0cc59ba2b6c215da81c9d051eebdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 3db5a4c15fa53526967077ad7d8a4ee094606778cbcc5b15219dd824fb3f1b09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 6d24f4d9fe955ee6e64c8dd3a35cbbd0af0416b2853440d681d2d80759bc3ea6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 c477e420959a2679a8cee01dac5d2621d45832ec5168fa1f199f30e8ca2cffc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 0964b0c210bb851dea83c8a6a0d9258a53c7b202c1f637106724b9c742ed6621
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 9e1be0c1c035cd352e78eb21b7fef932830cd5b5d5168248a71bce023105a30f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 84693cddb4b6288b7dc3c7ba1b4b39275898638fe4695c8c006cbfcc8373efce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 f49d2df8e729209bb812d16703e00eba376b954f57de36af39c02e7c67170e00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 e52be9e2fd28173d70cf7c0f8e734f8cac05ffee1d8bc443eec759802f8b0baa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 3b50a4761888435c05950f03e4272979bdf3ce42087926587e608323e5b9bf4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 09e8b3f7dca60b8b7302f2c73d893e3dc5cd1e350ae677bde57a3682fe3108e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 f26c1f51f49350420676c386379956b4b2e292ec829f03c71c893de5606a72fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 1114365be8293f28dd4c3e487ee65d9c87cc1add3af0458680a73732b7e550fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 f3a82067010f11a5fca7f51f6a15f994627efcf89a7ab8c79a7865e065563eac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 caabdb26cdf4dc852403f961b6c9898fd9ca7e58e2ba024a81370be697ae30e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 975341fa23274be00182de8f6307b0528ee38a84f90fe3b542b2abe42497398c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 2cee9e35057014df187ea3269e5af16988913ce96c037af3cb14bede71e2b188
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 7199a5ca0c9b65229e2fd1a92c7fdd184c2ae713d2b0f32c2e9de5c47fbee34b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 f3bc4cc63c2c065f272f55e363747f55838f51f429242b3aedab96cfe460f66a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 a4ec0f012888dd589407a38d5832b6d02442665c05b94cc3f8200992bc7305ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 b268463c464204fafbc32de97c67cb744683f6e548cb7f3540acadae1381dda2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 b328cce9c9514c73a17846948488a376d401848adb33bc2a0c1567317cc3ded1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 77a11a2df60ae8a6e55e9091294f75573698f5ae97b5dcb59009f60159622bf9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 8bc259d5f7cfdfb921b4daf927e6e0abbf21681de8841a104ea325fcf7831690
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 bdc3a12a230e1158e9b76ab511a79694aa63c5e2aec0760458617daaeb547569
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 1b949132d4ad983b2031a4e33fa009ef58699bd4d35c52b7772223d3070c4a68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\base_library.zip
        • Size 1.3MB
        • SHA256 0b08645bfc8083442e16a81c6a19ef3bb07a79106850b2f89a9b0f89893b1262
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\libcrypto-3.dll
        • Size 6.0MB
        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\libssl-3.dll
        • Size 1.3MB
        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\pyexpat.pyd
        • Size 217KB
        • SHA256 e34347c4e11b2ecc57df2ce1627ba7f98fd076e9df59951e9034f5aa8e95a2fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\python3.DLL
        • Size 72KB
        • SHA256 6c45910e7c82617ca6360820de861699cc99f9efee434df290aa4c6e38f39886
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\python314.dll
        • Size 6.5MB
        • SHA256 0f9857ffdfe010fe6b99328d58c2e3c7472ce75f336bf9c2ad9bd5bca3bce700
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\select.pyd
        • Size 32KB
        • SHA256 722328e7fad8048057fc966474ba73966d2ceebaa32e7344cce09640ab4dc9bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\sqlite3.dll
        • Size 1.5MB
        • SHA256 d3e60dd22e62c9fbdb64b31b1b8c48782e1d4958d04d0bf830cffd31ace3275f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000c202\ucrtbase.dll
        • Size 1.1MB
        • SHA256 4a4a407662465c3d1f5d808af3d9fd084baa064bebe62c6c205faec63d308492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download