Analysis
- max time kernel
30s - max time network
33s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
19/09/2026, 11:14
General
- Target source_prepared.exe
- Size 11.0MB
- Sample260919-nbzs8abl3x
- SHA256 99f7c61d8ef10a95a93b35c2808adabf4a076b5297db47b741bb8060ff714314
Malware Config
Signatures
- Loads dropped DLL 12 IoCs
- UPX packed file 30 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_socket.pyd
_zstd.pyd
base_library.zip
libcrypto-3.dll
libffi-8.dll
python3.DLL
python314.dll
memory/4980-54-0x00007FF9CD740000-0x00007FF9CD74F000-memory.dmp
memory/4980-75-0x00007FF9C5B40000-0x00007FF9C5B6C000-memory.dmp
memory/4980-58-0x00007FF9C5BC0000-0x00007FF9C5BDA000-memory.dmp
memory/4980-67-0x00007FF9C5AA0000-0x00007FF9C5AB4000-memory.dmp
memory/4980-52-0x00007FF9C5BE0000-0x00007FF9C5C09000-memory.dmp
memory/4980-63-0x00007FF9C5AC0000-0x00007FF9C5B40000-memory.dmp
memory/4980-69-0x00007FF9B2660000-0x00007FF9B2C91000-memory.dmp
memory/4980-43-0x00007FF9B2CA0000-0x00007FF9B33AF000-memory.dmp
memory/4980-72-0x00007FF9C0220000-0x00007FF9C023A000-memory.dmp
memory/4980-73-0x00007FF9B2CA0000-0x00007FF9B33AF000-memory.dmp
memory/4980-74-0x00007FF9C5BE0000-0x00007FF9C5C09000-memory.dmp
memory/4980-60-0x00007FF9C5B40000-0x00007FF9C5B6C000-memory.dmp
memory/4980-85-0x00007FF9B2CA0000-0x00007FF9B33AF000-memory.dmp
memory/4980-83-0x00007FF9B2660000-0x00007FF9B2C91000-memory.dmp
memory/4980-84-0x00007FF9C0220000-0x00007FF9C023A000-memory.dmp
memory/4980-82-0x00007FF9C5AA0000-0x00007FF9C5AB4000-memory.dmp
memory/4980-81-0x00007FF9C5AC0000-0x00007FF9C5B40000-memory.dmp
memory/4980-80-0x00007FF9C5B40000-0x00007FF9C5B6C000-memory.dmp
memory/4980-79-0x00007FF9C5BC0000-0x00007FF9C5BDA000-memory.dmp
memory/4980-78-0x00007FF9CD740000-0x00007FF9CD74F000-memory.dmp
memory/4980-77-0x00007FF9C5BE0000-0x00007FF9C5C09000-memory.dmp