Analysis

  • max time kernel
    148s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/10/2026, 21:49

General

  • Target
    launcher.exe
  • Size 12.1MB
  • Sample261001-1pc8latzew
  • SHA256 ea4019ab31257d455e8ecb4bf211c0af1e275a5f42dfdc6cbe9b29847008119b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\launcher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3856
    • C:\Users\Admin\AppData\Local\Temp\launcher.exe
      "C:\Users\Admin\AppData\Local\Temp\launcher.exe"
      2⤵
      • Loads dropped DLL
      PID:3452

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_bz2.pyd
        • Size 84KB
        • SHA256 261545bd24f15a783fc0c82568b766a4ab569dde14507a81701cccf5293e6e54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _cffi_backend.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_cffi_backend.cp313-win_amd64.pyd
        • Size 176KB
        • SHA256 21b7160d4a6da9590794fdb38718982060b5c92d56fb0e441fc8b62ee789be8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_ctypes.pyd
        • Size 131KB
        • SHA256 9d6dccb4cd84a44a107f9b06b91c0a44e85766d9bf4debb6abbde8fda7494c2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_hashlib.pyd
        • Size 67KB
        • SHA256 79a26289aef0d92545a082507c7021f10e219621d137cb726c4d0fbbfd4b46ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_lzma.pyd
        • Size 155KB
        • SHA256 ee224aacf5cf9c9974a1b842aac8d89d5d9b7eeebbf4d76619ae0ce4da8ecd96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_socket.pyd
        • Size 84KB
        • SHA256 ccbd0f83df3784da08147b8e8765e28c978de28b5c0eddcfba5567b59d43fef9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\_ssl.pyd
        • Size 177KB
        • SHA256 8d2f51fa1dc929073a2ad8d1c7c0c911e8f695870dcf4dda2846f4b75a7f77fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\base_library.zip
        • Size 1.3MB
        • SHA256 ef025fdfadbde4a5e776d5a34ebc62f88b4304632620e030cfac64c68ac603a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _rust.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\cryptography\hazmat\bindings\_rust.pyd
        • Size 9.4MB
        • SHA256 1d4332a447cab13dec8e3a533ad579e0e562b79e40822c931f33769758fc7156
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 09499e186cf0e434ffa17ad153aa9a66d6048c54a2c03b823e2a06c49d9affe4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\libssl-3.dll
        • Size 776KB
        • SHA256 28c395290279fa4f4f54a57b85cd66d853895f925fefb8f6fdebc0d8b1cdd07c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\python3.dll
        • Size 70KB
        • SHA256 76e7fd69a01081726308317d6e502721c2ba6792b48880dc1ef649c755788db7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\python313.dll
        • Size 5.9MB
        • SHA256 e820bf024efd2b56bb2b82791e6b6ddc7303f070f8e72cba7637482a8a906238
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\select.pyd
        • Size 32KB
        • SHA256 024f955349fe46cf1bb2c22c6b57fcf38cf5755d46166fbf63e7e5b92433b111
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI00000f102\ucrtbase.dll
        • Size 1.3MB
        • SHA256 5c52e3a303baaac0e0af8bd9b96134993da34bc9d834a31ef37e1d2cdc7fe192
        • MD5 SHA1 SHA512 SSDEEP TLSH