Overview

overview

7

Static

static

3

efaa8c0076...c7.exe

windows10-2004-x64

7

efaa8c0076...c7.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 08:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7.exe
  • Size 8.4MB
  • Sample260930-ksemts1tay
  • SHA256 efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7.exe
    "C:\Users\Admin\AppData\Local\Temp\efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Users\Admin\AppData\Local\Temp\efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7.exe
      "C:\Users\Admin\AppData\Local\Temp\efaa8c00764a83e14a34c1375d7e2be74d318749b31152645bd17b8eeb1dc6c7.exe"
      2⤵
      • Loads dropped DLL
      PID:4852

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\VCRUNTIME140.dll
        • Size 113KB
        • SHA256 4af0c601de5a45dc92db40c07ecbfce75ea6f64765eb3efadea35268a9fbcd46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_bz2.pyd
        • Size 83KB
        • SHA256 c7432d3b4bc3ea44df5a49a67d83e388061f0d60792579989ad4f95df00a9d68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_hashlib.pyd
        • Size 65KB
        • SHA256 6af5a08f40f0d3496e89a530b5d2312b3a961cf940b350b47ee5404e559445ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_lzma.pyd
        • Size 160KB
        • SHA256 5cbaaabd7772c143f6965897f3350a6cf0c047d90a89a89141bfd1bfe800e003
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_socket.pyd
        • Size 83KB
        • SHA256 ff342b925663e2860963c8f14d8634cb6208e14a602f103fbb3decbd1dc9f6a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_ssl.pyd
        • Size 183KB
        • SHA256 921c7c3c99adabeb6654cdd271a8ed1c8cf550d2f54324ea3f134ae61ae20360
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\_zstd.pyd
        • Size 489KB
        • SHA256 0c78dcd3ab292ebe9bbaf81b27eeed290c9fda5416d5916e1dea6703b5e48493
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\base_library.zip
        • Size 1.3MB
        • SHA256 dcb231c9e75085dd28fe2d06a04e12cecaa4d4365fded83bed9a98dc49baaa9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\libcrypto-3-x64.dll
        • Size 7.6MB
        • SHA256 f2a07c3c6c0ec9587c18c972b347b501e38a367807eb3a33ae3ea4f407b7f951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\libssl-3-x64.dll
        • Size 1.5MB
        • SHA256 2f7e708fee3455f343f0c2e050293ca732a83a2e1d3a6f802b2fa855788ff836
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\python314.dll
        • Size 6.3MB
        • SHA256 15b623c4cbbef120f778bad323a392f7d8097de2d5221fc10b262a6a289c11be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\select.pyd
        • Size 30KB
        • SHA256 ce858d34e8f1e836a2c4b78bd890b50eea9a291c9d881d94c0f03e48ba586f8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000b3c2\unicodedata.pyd
        • Size 739KB
        • SHA256 a735c739810ec30d0a0c1cc48bf72beed372d8e0d3fd715057b503ef19e3b33b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download