Overview

overview

8

Static

static

3

Kirra_Spam.exe

windows10-2004-x64

8

Kirra_Spam.exe

windows11-ltsc_2024-x64

8

Kirra_Sweep.exe

windows10-2004-x64

7

Kirra_Sweep.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/09/2026, 18:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Kirra_Sweep.exe
  • Size 7.6MB
  • Sample260916-xffetavakb
  • SHA256 4a6c7cb4876723988a921a120418ac9eefe576ff41b1c8931a16972b6efaf52e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
    "C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1168
    • C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
      C:\Users\Admin\AppData\Local\Temp\Kirra_Sweep.exe
      2⤵
      • Loads dropped DLL
      PID:4300

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Kirra_Sweep.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\Kirra_Sweep.dll
        • Size 4.6MB
        • SHA256 94f6885b79ccc55a635def815d8a5d94d9847fa1ca96d5acc1aa2747988b99b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\_bz2.pyd
        • Size 78KB
        • SHA256 d7faf016ef85fdbb6636f74fc17afc245530b1676ec56fc2cc756fe41cd7bf5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\_cffi_backend.pyd
        • Size 175KB
        • SHA256 e029cabce12aea3d77f2c8709a0f4be695f3fedd1144c14607b4fcc3b9e9bc3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\_ctypes.pyd
        • Size 116KB
        • SHA256 0bd4ed11f2fb097f235b62eb26a00c0cb16815bbf90ab29f191af823a9fed8cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\_lzma.pyd
        • Size 150KB
        • SHA256 f904b02720b6498634fc045e3cc2a21c04505c6be81626fe99bdb7c12cc26dc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _rust.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\cryptography\hazmat\bindings\_rust.pyd
        • Size 9.6MB
        • SHA256 6c69eb01deed404f8d16f4f23b176a1080745ea4b1c2dfd4c64e874e93782bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\python3.dll
        • Size 60KB
        • SHA256 70596aea8c5ca8f3bf88e46a0606522413b50208ec9fcc6b706f7a064cf83b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_1168_787180_RvqlBexMZjM\python310.dll
        • Size 4.2MB
        • SHA256 b7a7f3707beab109b66de3e340e3022dd83c3a18f444feb9e982c29cf23c29b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1168-38-0x00007FF7E6470000-0x00007FF7E6C3A000-memory.dmp
        Download

        memory/4300-40-0x00007FFB071E0000-0x00007FFB07688000-memory.dmp
        Download

        memory/4300-39-0x00007FF7E6470000-0x00007FF7E6C3A000-memory.dmp
        Download

        memory/4300-41-0x000002CE8E840000-0x000002CE8F1DA000-memory.dmp
        Download