Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 11:09
General
- Target main.exe
- Size 27.3MB
- Sample260910-m9e12avzhx
- SHA256 3e91f1b9869eeead2ca3322959a3c535df3151bb47d45835892eb36f3b1cf3ce
Malware Config
Signatures
- Loads dropped DLL 28 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\main.exe"C:\Users\Admin\AppData\Local\Temp\main.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\main.exe"C:\Users\Admin\AppData\Local\Temp\main.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
_imaging.cp313-win_amd64.pyd
VCRUNTIME140.dll
VCRUNTIME140_1.dll
_brotli.cp313-win_amd64.pyd
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_wmi.pyd
ada92cb5d92a588d1b93__mypyc.cp313-win_amd64.pyd
_zstd.cp313-win_amd64.pyd
base_library.zip
cd.cp313-win_amd64.pyd
libcrypto-3.dll
libffi-8.dll
libssl-3.dll
libscipy_openblas64_-b788215d9d47792bcba3a2e2a7114320.dll
msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll
_multiarray_umath.cp313-win_amd64.pyd
_umath_linalg.cp313-win_amd64.pyd
python3.DLL
python313.dll
select.pyd
Lorem ipsum.txt
ucrtbase.dll
unicodedata.pyd
memory/2716-280-0x00007FFD2F4F0000-0x00007FFD2F4FD000-memory.dmp
memory/2716-333-0x00007FFD21AE0000-0x00007FFD21BAE000-memory.dmp
memory/2716-298-0x00007FFD2C2F0000-0x00007FFD2C323000-memory.dmp
memory/2716-296-0x00007FFD2CCD0000-0x00007FFD2CCF7000-memory.dmp
memory/2716-292-0x00007FFD1A2F0000-0x00007FFD1A821000-memory.dmp
memory/2716-291-0x00007FFD1A830000-0x00007FFD1AE9C000-memory.dmp
memory/2716-289-0x00007FFD2C820000-0x00007FFD2C836000-memory.dmp
memory/2716-284-0x00007FFD2F2B0000-0x00007FFD2F2BF000-memory.dmp
memory/2716-307-0x00007FFD19F00000-0x00007FFD1A2E4000-memory.dmp
memory/2716-308-0x00007FFD18B30000-0x00007FFD19EFB000-memory.dmp
memory/2716-277-0x00007FFD31780000-0x00007FFD3178D000-memory.dmp
memory/2716-311-0x00007FFD2C7F0000-0x00007FFD2C812000-memory.dmp
memory/2716-275-0x00007FFD2C9A0000-0x00007FFD2C9B9000-memory.dmp
memory/2716-314-0x00007FFD188A0000-0x00007FFD18B24000-memory.dmp
memory/2716-263-0x00007FFD2CCD0000-0x00007FFD2CCF7000-memory.dmp
memory/2716-317-0x00007FFD2F2B0000-0x00007FFD2F2BF000-memory.dmp
memory/2716-318-0x00007FFD21C10000-0x00007FFD21CEA000-memory.dmp
memory/2716-271-0x00007FFD2CA00000-0x00007FFD2CA2B000-memory.dmp
memory/2716-321-0x00007FFD2C820000-0x00007FFD2C836000-memory.dmp
memory/2716-269-0x00007FFD2CA30000-0x00007FFD2CA4A000-memory.dmp
memory/2716-327-0x00007FFD2D4C0000-0x00007FFD2D4CB000-memory.dmp
memory/2716-329-0x00007FFD2C2F0000-0x00007FFD2C323000-memory.dmp
memory/2716-265-0x00007FFD31810000-0x00007FFD3181F000-memory.dmp
memory/2716-335-0x00007FFD21980000-0x00007FFD21A32000-memory.dmp
memory/2716-334-0x00007FFD19F00000-0x00007FFD1A2E4000-memory.dmp
memory/2716-299-0x00007FFD21AE0000-0x00007FFD21BAE000-memory.dmp
memory/2716-332-0x00007FFD2C2B0000-0x00007FFD2C2F0000-memory.dmp
memory/2716-254-0x00007FFD1A830000-0x00007FFD1AE9C000-memory.dmp
memory/2716-324-0x00007FFD21A40000-0x00007FFD21ADD000-memory.dmp
memory/2716-322-0x00007FFD1A2F0000-0x00007FFD1A821000-memory.dmp
memory/2716-345-0x00007FFD2C820000-0x00007FFD2C836000-memory.dmp
memory/2716-357-0x00007FFD21980000-0x00007FFD21A32000-memory.dmp
memory/2716-358-0x00007FFD1A830000-0x00007FFD1AE9C000-memory.dmp
memory/2716-352-0x00007FFD188A0000-0x00007FFD18B24000-memory.dmp
memory/2716-353-0x00007FFD21C10000-0x00007FFD21CEA000-memory.dmp
memory/2716-359-0x00007FFD18B30000-0x00007FFD19EFB000-memory.dmp
memory/2716-346-0x00007FFD1A2F0000-0x00007FFD1A821000-memory.dmp
memory/2716-356-0x00007FFD2C2B0000-0x00007FFD2C2F0000-memory.dmp
memory/2716-354-0x00007FFD21A40000-0x00007FFD21ADD000-memory.dmp
memory/2716-351-0x00007FFD2C7F0000-0x00007FFD2C812000-memory.dmp
memory/2716-349-0x00007FFD19F00000-0x00007FFD1A2E4000-memory.dmp
memory/2716-347-0x00007FFD2C2F0000-0x00007FFD2C323000-memory.dmp
memory/2716-344-0x00007FFD2F2B0000-0x00007FFD2F2BF000-memory.dmp
memory/2716-343-0x00007FFD2F4F0000-0x00007FFD2F4FD000-memory.dmp
memory/2716-342-0x00007FFD31780000-0x00007FFD3178D000-memory.dmp
memory/2716-341-0x00007FFD2C9A0000-0x00007FFD2C9B9000-memory.dmp
memory/2716-340-0x00007FFD2CA00000-0x00007FFD2CA2B000-memory.dmp
memory/2716-339-0x00007FFD2CA30000-0x00007FFD2CA4A000-memory.dmp
memory/2716-338-0x00007FFD31810000-0x00007FFD3181F000-memory.dmp
memory/2716-337-0x00007FFD2CCD0000-0x00007FFD2CCF7000-memory.dmp
memory/2716-355-0x00007FFD2D4C0000-0x00007FFD2D4CB000-memory.dmp
memory/2716-348-0x00007FFD21AE0000-0x00007FFD21BAE000-memory.dmp