Analysis

  • max time kernel
    149s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/09/2026, 10:20

General

  • Target
    amindez24.exe
  • Size 19.6MB
  • Sample260912-mdds4awze1
  • SHA256 1c7568aa5a551ae6da3f0a826d0ac12b2f17aad93222de118cdd8d7150398512
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 25 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\amindez24.exe
    "C:\Users\Admin\AppData\Local\Temp\amindez24.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Users\Admin\AppData\Local\Temp\amindez24.exe
      C:\Users\Admin\AppData\Local\Temp\amindez24.exe
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      PID:3188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        qsvgicon.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\iconengines\qsvgicon.dll
        • Size 70KB
        • SHA256 dcfe12e028e1fd694a99fbc18f6aebf08d36223f5fd99c1bc1e7bc85eee11281
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qgif.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qgif.dll
        • Size 46KB
        • SHA256 1ac71f48e08ee0aa405d55041f8340d56ed827fb94260bceda46ac0a50dfb7a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qicns.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qicns.dll
        • Size 54KB
        • SHA256 c20ad45b3c2891d9f7a501d7e9f6354e1734244bc455d185ffd45ec08fb3e43d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qico.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qico.dll
        • Size 44KB
        • SHA256 0eb08bc9d8f6c1ab05f3a837629eb10e41eb6aa72240d23e291056b801894794
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qjpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\imageformats\qjpeg.dll
        • Size 564KB
        • SHA256 bc3815c58443a01f43417ecac74bbf182c245d433ea82af0b3dc669c2cb064ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qminimal.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qminimal.dll
        • Size 60KB
        • SHA256 c4f03a873f96edd8ab9c3016883f1705669743ba48d1ecbc5132704db48319c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qoffscreen.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
        • Size 111KB
        • SHA256 7a3f14ab1f373e96e706db6f3f2d88a4eb7132f3d03e139fdc84a303ca974e22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qwindows.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\platforms\qwindows.dll
        • Size 983KB
        • SHA256 dd126e2a47f7f3d4a855981e9d4012076058b1440f6900b9a07aa950e4e4f20a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qmodernwindowsstyle.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
        • Size 225KB
        • SHA256 093e3ac68dfdac52a2667a2f7ba00b336392f9d6bde08430494ef54dbd120541
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtCore.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtCore.pyd
        • Size 2.5MB
        • SHA256 91dd5166110b88a4f4d3acda6fe6c10ed699882dd3602328a59e9f656cc766b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtGui.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 cf5ae37fd119fb29a53f1f2cea1362fdf036d940191be45d83da0f98ce8752b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtMultimedia.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtMultimedia.pyd
        • Size 433KB
        • SHA256 1f30fea8a3327be317ab426e0e09ec5b34efb07c7f27fd4c9402f4b705d8fb3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtNetwork.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtNetwork.pyd
        • Size 804KB
        • SHA256 dc8a352ee9e67efa05bb7c59a266171faa0c0c40e0015fac9b31a9a6d058ec49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QtWidgets.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 4f81361816e94e1ae05f178085b22d5b9b19e417713b1966dd481a4017aa3b21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sip.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\PyQt6\sip.pyd
        • Size 108KB
        • SHA256 80e3122ad70cc48f71388f18b9094eb655c0950e129463967e33f7d102b78f4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Qt6Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\Qt6Core.dll
        • Size 10.0MB
        • SHA256 fae4778a42e93adc82b831c879c886a05147e9cc26760808d21116be5547259b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnonymousPro-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\AnonymousPro-Regular.ttf
        • Size 37KB
        • SHA256 306622afa0f022f842aa50a743aa6be1b3609e99433e93dc5ce030de1bc1387c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CourierPrime-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\CourierPrime-Regular.ttf
        • Size 42KB
        • SHA256 4b024df3366ec63ce2cd2da79276e584db8f8c9b13babada706563b878189905
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FiraCode-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\FiraCode-Regular.ttf
        • Size 55KB
        • SHA256 b5bab20bd6c2529ecdf3f4e3e2c198e367e9b09ea05f61ad20fbaeddf67c3de5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IBMPlexMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\IBMPlexMono-Regular.ttf
        • Size 39KB
        • SHA256 62e691b7edd620394b3d635950f17546655bcaf4d5a364621dd13e0a48e6ce84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Inconsolata-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\Inconsolata-Regular.ttf
        • Size 34KB
        • SHA256 dfc9b240b7529bcc8f0b4a720bcf38cdd29e3f16742ab6cc1a64c9103b47b25a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        JetBrainsMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\JetBrainsMono-Regular.ttf
        • Size 56KB
        • SHA256 6ea82c387e7e298d824ae9893d7c043ca0fe9df26c1e882ca1a8df3efd05e1d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RobotoMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\RobotoMono-Regular.ttf
        • Size 22KB
        • SHA256 972568bd63bda288354aa136e244029bccf44cff23268cab8f9691ca67024dca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SourceCodePro-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\SourceCodePro-Regular.ttf
        • Size 23KB
        • SHA256 b378a2005948e259f34c0aa601c254d949185185840a0818a14f7433074d8d6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpaceMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\SpaceMono-Regular.ttf
        • Size 39KB
        • SHA256 32b865cd8936981bf9d5e902e1b664ebe35c8f959346c6eb346b6d7642d878a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UbuntuMono-Regular.ttf

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\fonts\UbuntuMono-Regular.ttf
        • Size 53KB
        • SHA256 1f14bf559e2bae36df94a5c618bccab2e5d1d6a82dbe3ebfbe89bacb8c007fcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon.png

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\assets\icon.png
        • Size 1.0MB
        • SHA256 bc059a9e1d63091b62ce3ea91ec5181e0baa1498352e516b8aef1fa70b69fdcb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        main.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\main.dll
        • Size 5.3MB
        • SHA256 b0f1c4da0c2a8c1d696ae00cc11a79bba6f45c4d3f2d137c2b5478bb6f1eda5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140_1.dll
        • Size 35KB
        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\msvcp140_2.dll
        • Size 273KB
        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\python3.dll
        • Size 68KB
        • SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\python312.dll
        • Size 6.6MB
        • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt6gui.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6gui.dll
        • Size 9.1MB
        • SHA256 8fceee959a670372aaa5763287c2ef7924cd9ecdbe2c29cf4b6c12a63079c503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt6multimedia.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6multimedia.dll
        • Size 1.2MB
        • SHA256 653ae2dff699ae91dc6d2b412ee3e7b2b02a02d6b0f4ff5c212cba5c1e54f763
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt6network.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6network.dll
        • Size 1.7MB
        • SHA256 0232076731e386b6cc353bdf743d5fb17e95a3493c2d02afac984db87ed47b96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qt6widgets.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\qt6widgets.dll
        • Size 6.3MB
        • SHA256 4d603bff620ae0830d15c25a787f9f10ed3f972d998f1f17c9c4f83937280399
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\vcruntime140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2260_527752_yyFgFI_KFCA\vcruntime140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2260-98-0x00007FF7A65D0000-0x00007FF7A79A5000-memory.dmp

        memory/3188-84-0x00007FFDF6F60000-0x00007FFDF743B000-memory.dmp

        memory/3188-93-0x00007FFDF4DC0000-0x00007FFDF4FF9000-memory.dmp

        memory/3188-125-0x00007FF7A65D0000-0x00007FF7A79A5000-memory.dmp

        memory/3188-85-0x00007FFDF6910000-0x00007FFDF6F5D000-memory.dmp

        memory/3188-126-0x00007FFDF7AF0000-0x00007FFDF8044000-memory.dmp

        memory/3188-90-0x00007FFDF5000000-0x00007FFDF528F000-memory.dmp