Analysis

  • max time kernel
    60s
  • max time network
    61s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 09:53

General

  • Target
    VRC_URL_Converter.exe
  • Size 17.9MB
  • Sample260910-lwrbga1fjf
  • SHA256 a59f57cf7c4dddcfd704250c9a769f5b85602b3f11bd4192fffc9c748ea9c1d8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 21 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VRC_URL_Converter.exe
    "C:\Users\Admin\AppData\Local\Temp\VRC_URL_Converter.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4224
    • C:\Users\Admin\AppData\Local\Temp\VRC_URL_Converter.exe
      "C:\Users\Admin\AppData\Local\Temp\VRC_URL_Converter.exe"
      2⤵
      • Loads dropped DLL
      PID:3272

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\_bz2.pyd
        • Size 84KB
        • SHA256 b3dd7cea6d03342252834cebcc814af37d850b86d0627fa22b7f6990882f2f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\_ctypes.pyd
        • Size 130KB
        • SHA256 dfa65498c77e71f038883337d2b5ffd92508489e79e6ee5e96ddec4ecf2a7fa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\_decimal.pyd
        • Size 276KB
        • SHA256 f55d81378a3261a7073fb71aee674152265b6f24ba6f375f9b939d5a117d8e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\_lzma.pyd
        • Size 155KB
        • SHA256 f20be6a9fee8fb5d53170c4bc24a39b48d3c0ccbe8e2000e60ff7d65b77c6ea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 13f8e079a1bdf3e0cfdacacc12a04429138405856d731a46e11e21488bf9b611
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 c40fa3884422e83b6345a02f3ef3122b86d5903b3f47c700a88716b1024c0bf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 301d30ac8bb2aceaaf11b6da7102b56f726afe962d8a95e1918040f46469d689
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 c32594648af1941e4c42571b5891ab5b906ace0514fc9dc94fa2573c4b9becf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 35d0f6a02e46cb3eb4f70745fa5042d574a4996cc1be691c5a43f3cc716b41de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 6d03c7c5c71f3d0480d0597dce98a96d0176f7db299b3329320313aa703dfba4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 82dde028373c0b261c50da7a4881c4673ae7efb5fa01ba6c79c04978766ed73e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 ae2efd2c5ff4e77d176037f987b92137f032d2100f16e574ab508ff95dd4ea43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 78424fc146694b713c0d38d2e4a715b38abbccc040640a279a0d958defd6013c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 bee37e3251c1bc47f27203b0042ba135cc5cee4426f0234cc80bdc74842279cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 e62738d1417489f57293f1e7b79a358d650468dab6a9cc32ddc713ed012c72ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 f058c52d46e836ce27e9570d16cd56069df54a71cbfb637107d6addad1396efe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 2ec2c7715cfae112f6b0be88a1d6ecc205af59068e28a2a08ecba2210bd8c7a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 4c73a5b8fa8bcf34f8051497162268fc4ac2b07f0c55c1fb7bcd71b4cb94d954
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 b23627b208833ec4f1ce9f0fa907e566b8898c146e3cdce1fec7683d58e4f55f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 164e54ca9f279d05adeaefe0078b158aac1301fc03efc892852dc5f9decb03b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 ece871a93c591feb12a7739b6bd58fefbda1ca090017ea29c3141e5e7c37bf28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 0d292fd1d9ef29553155c00189f05a0dc9d12abda193d9fdadbda654b0026c3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 7421f658c0a00709baf789222299fff8f9dcf5c902129f00844b6136c5007ae4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 cf04033d752e35e1b3f552eaa9dea0951f4e985dca0065a7047765468bb5bc79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 eab981c86f34123b63725f2d42f9d4d579ea8284a6419e26e50b7fbc0e63d895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 940426fcc466d1c8b85a4b6cab213faa04572274f6bece3d25395d8d29a7fedf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 69cfcdfb65bb6da2292220bba2c9a9067845aeaa08e1ea1ce1f2fe69160fdc70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 e527ffaebb24cebe7170398fc5b20230fa6cc46caaecd5a18172138f81e6f6a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 76ea8042cc384cc287aba770778067f2f32d75b43f3a5f32ec3fcc895433e6a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 0e0a23fa483a8f4f5f6a271a8917460952cf415dcd2f30599fba36c992e6fb29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 cd344c79e1e5c2c7abad2597bcc3137df5e87a947769cc64d1071a2f7c8ef509
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 851e07860554b3396988b1dc9cc2e974db75ba76455d670ab0d1078e7d8ffa0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 c2f83b2f46a790a36a16a7ea245cf692e6b4db7621013fd977230e351b622598
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 7605d5196fd8d51da48604669c564bb7ef17a008c8009023942f4edafaa0da03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 860d42c3ec3d739601b9cbe785fecd20266fec1bad5bb43652139ad9b31ee09e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 895805b1c53ac6ea169687d492b8fe4c223e86838af69745311da766385682a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 2a779061c9e9f3463fc0e5fe01550748987b9713c0269b0ffde590214d09e545
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 f32e6e1094436d92bd3569e5a044b21c0323a6e2c5650152f3430a244557390f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 2c57e27abe1ec27dfa3cd8b45731ee7c8018b27eb9b8be091c0c2c60c1cbd0ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 4769e0fcf9fea8b994707234bd594e75be51211b9925cc12ec2622841e10db56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 add30502f500d303162391054c077c91b8fa506d7a62204656fc2b437c3640ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 7d36b9dadb257187a97d84defdc2845c954720d8a273c19276c926430eaac0a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 fb0f6c25f79b7334075328c2f47962d9369e177ceff70f1655098b0f827a65ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\base_library.zip
        • Size 1.3MB
        • SHA256 00e3ca07fa0402c37658787d132cf709cdd3509839a4c897f201e46abcdf4eed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\pyexpat.pyd
        • Size 201KB
        • SHA256 719dc29fee125f0d5026319da9a3001c130c84419db7ef7c5473fb496d56cfc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\python313.dll
        • Size 5.8MB
        • SHA256 41ec4fc4e5bc8b207258590238f7f050b13fdfee84c4a7b1ecff6e945d031a10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\select.pyd
        • Size 32KB
        • SHA256 9cc1ef0264060099503592db57ee7d7c1f8d6bea689b2ed125919c7a30b7ab7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\tcl86t.dll
        • Size 1.8MB
        • SHA256 a308beae8555cff5ac2aff7eaf0aef40b5fe173f047e246dc49da9a4d3ef62f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\tk86t.dll
        • Size 1.5MB
        • SHA256 20f4876506bce7f89e53570e64fd1dce30a64548326b45f372871c7019560df4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\ucrtbase.dll
        • Size 1.1MB
        • SHA256 fd579c729469a4a7ae27fc1df0f5dfdc403232650d50e59226964b10c4eb4486
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\unicodedata.pyd
        • Size 695KB
        • SHA256 1989628f16052f9123c5cf603e96490a75fde6228315457556f96a838bf9e904
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42242\zlib1.dll
        • Size 142KB
        • SHA256 1dd27f0411ebb31bd148a61589cee254410915f1e6c37aa3ffa52fac71a5426c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3272-1068-0x00007FFBB1240000-0x00007FFBB1269000-memory.dmp