Overview

overview

7

Static

static

3

Kirra_Sweep.exe

windows10-2004-x64

7

Kirra_Sweep.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/09/2026, 14:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Kirra_Sweep.exe
  • Size 7.6MB
  • Sample260916-ry17cacm5v
  • SHA256 4a6c7cb4876723988a921a120418ac9eefe576ff41b1c8931a16972b6efaf52e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
    "C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3324
    • C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
      C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
      2⤵
      • Loads dropped DLL
      PID:3320

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Kirra_Sweep.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\Kirra_Sweep.dll
        • Size 4.6MB
        • SHA256 94f6885b79ccc55a635def815d8a5d94d9847fa1ca96d5acc1aa2747988b99b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\_bz2.pyd
        • Size 78KB
        • SHA256 d7faf016ef85fdbb6636f74fc17afc245530b1676ec56fc2cc756fe41cd7bf5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\_cffi_backend.pyd
        • Size 175KB
        • SHA256 e029cabce12aea3d77f2c8709a0f4be695f3fedd1144c14607b4fcc3b9e9bc3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\_ctypes.pyd
        • Size 116KB
        • SHA256 0bd4ed11f2fb097f235b62eb26a00c0cb16815bbf90ab29f191af823a9fed8cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\_lzma.pyd
        • Size 150KB
        • SHA256 f904b02720b6498634fc045e3cc2a21c04505c6be81626fe99bdb7c12cc26dc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _rust.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\cryptography\hazmat\bindings\_rust.pyd
        • Size 9.6MB
        • SHA256 6c69eb01deed404f8d16f4f23b176a1080745ea4b1c2dfd4c64e874e93782bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\python3.dll
        • Size 60KB
        • SHA256 70596aea8c5ca8f3bf88e46a0606522413b50208ec9fcc6b706f7a064cf83b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3324_771674_KVwCZA2W8ds\python310.dll
        • Size 4.2MB
        • SHA256 b7a7f3707beab109b66de3e340e3022dd83c3a18f444feb9e982c29cf23c29b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3320-40-0x00007FFF3A7A0000-0x00007FFF3AC48000-memory.dmp
        Download

        memory/3320-41-0x00000197DCC30000-0x00000197DD5CA000-memory.dmp
        Download

        memory/3320-39-0x00007FF69B4D0000-0x00007FF69BC9A000-memory.dmp
        Download

        memory/3324-38-0x00007FF69B4D0000-0x00007FF69BC9A000-memory.dmp
        Download