Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 17:13
Behavioral task
behavioral1
Sample
install dependecies.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
install dependecies.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target install dependecies.exe
- Size 9.4MB
- Sample261001-vrld4agh88
- SHA256 a87d466f0431d951b0be9557320b699cb2b805de896e4ea646f6583636ca9ed8
- MD5 e111da0cc0824198024ef23ee5a70286
- SHA1 f4b6c939e96f50419ac90153dfcac9886e0979cf
- SHA512 f4323c07ab924d9b7d0726d61c97183f411a960f346dc578a4160193f1b4b2c3923fda416e3e7e0b7b1fcbf50f87db91e728ab4562e17790b9b269738ad3efa6
- SSDEEP 196608:G+YHXEpXnH2ph1igtlxSiLCw10+u41ZPcUa979dtytvonYpPT11pZ:rqXEAphJtD510MjaDytvUYD
- TLSH T152A63368F7A051FAF5B7853D89D69802A2F271520B91D3CB23B0112A3F676F41D3DBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
pid Process 572 install dependecies.exe 572 install dependecies.exe 572 install dependecies.exe 572 install dependecies.exe 572 install dependecies.exe 572 install dependecies.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2072 wrote to memory of 572 2072 install dependecies.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\install dependecies.exe"C:\Users\Admin\AppData\Local\Temp\install dependecies.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2072 -
C:\Users\Admin\AppData\Local\Temp\install dependecies.exe"C:\Users\Admin\AppData\Local\Temp\install dependecies.exe"2⤵
- Loads dropped DLL
PID:572
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\VCRUNTIME140.dll
- Size 174KB
- SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
- MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
- SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
- SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
- SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
- TLSH T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\_bz2.pyd
- Size 86KB
- SHA256 b938073c85cf6b9fe80556d7899ed1901e5e60b7adea2832442376239fb36b36
- MD5 4cc74cced07914bd71dc9c4d2a3f127a
- SHA1 77bda774eff7c8afc94892d2d5d63dd3c80f9ea4
- SHA512 8f81a5287bc5f59eeb6bb6703c00495cf761816e6eb20b6cb401af20040464fffc5b5e95d21b49d6260debb9cfac4031cf87b5248c0077fa8edd0d390cc1910b
- SSDEEP 1536:+/BvOKz7hvAKyRXzgwnZpfzyONpGX/4TjW8hSlUbrjvUIp3VJyPs5i9EfIY+8i:YBvLztGRXHyONpE/ajhwYXUIp3VGV
- TLSH T185838E87E3A463F6F6AB81B4D6810753E730BB460750A3AFB24482853F23F91AE59355
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\_lzma.pyd
- Size 157KB
- SHA256 d2abf8db7fb0cf6285663b177991691a41b37e215c3d71fd087a98d8ec1bee63
- MD5 e882005d06af06ef17b2338342b3f41e
- SHA1 96dfac53ce267a9dd4d094bf5c5a665bc1cedfe9
- SHA512 1e53c3501796da814f75ba8fc683720e968c5944fbeb2b9836c48a6656df0da120c075bc6c17ea788efa14be11f29172e80c64febe72e43502a02f707a5928dd
- SSDEEP 3072:NJ66g4T5QW7JfyjEqkSkA51b4rznfJ9mNoVUIsbUIpI1yUx1:NUR4Tp4QPZ8N4nxYOIbHy
- TLSH T1FDF34C86B794F0E6F7328C78D2614F57E6F5781A0320929A01CC976D2B1FB759A2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\_zstd.pyd
- Size 491KB
- SHA256 33c6eca99470c3eb9d776b617c550ad41b002a668336f062a9ab7be677a7409a
- MD5 fee9e34fa16e0ff378c281202a78d003
- SHA1 d8681b1ecf3776d1f095ecb738210423bcfec287
- SHA512 766fa08c57cb9e000237a5690e6bae8fbe2d2fb79fdf39f1a2f07ec668ee225df9675c9041d4b26410cbb4fb341693454dbcad722bcff3e78321412e0bfcf4ae
- SSDEEP 6144:HoRvcMPHwrJqB2l1eUVcXmgqCBdBwzKhThruVxzeeVUL2LzMYZpzBYQFE95+SClu:IRFcemgqKP2eeVC2Lz9kQe95BCl9Vmxp
- TLSH T1C2B48D43F29943EDE53BC4B8CF465A13FBB1780B1214965B97A5CB993F07B309A69308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\base_library.zip
- Size 1.3MB
- SHA256 064a65dd82f9a27de401874d6a79e93cbc638f2bbd2926d4b83e8214e640e558
- MD5 a318c649626ae1fb2fb240cb7d4d570e
- SHA1 b2ec1e6ade966e2af4b375148f521083b5073eff
- SHA512 01dad2111d4debbe7d39e17743f2f04f1c142215d3135d6537a0d6cfd2ab1b98032a3274364ee62082dc6c4e0321852c73492ac02c8d91168afd444a83ac7375
- SSDEEP 24576:t9uUFcRZrQeOdP2m2dfLLaYLRdylbjGDZHPL:XuUFcRx/aY9dFl
- TLSH T1FD552B91B9917967FEC9F37A35B75A0CA715C0109B20D303B4A88DAC6FDF260AE558CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\python314.dll
- Size 6.5MB
- SHA256 0f9857ffdfe010fe6b99328d58c2e3c7472ce75f336bf9c2ad9bd5bca3bce700
- MD5 689a9724a63fb3b4f209c771c31d8a05
- SHA1 2f88e8e16a9086e7974da71914fe4e89cd2eff9a
- SHA512 0c96ec1b9ef6e56f29202681272c1062ea49867757c966ebdd050c513d4988cfab7cd6c31e1d94f438c1412b38f7b446af1629b2776c41d712051ab70054ac9f
- SSDEEP 98304:xEQucV/qdDSSmJBA3ICXmRaJtv3vyHDMiE4rofB:xEQucVygSmJBA3InSiFG
- TLSH T19F668D26737515A4D8BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI000008182\ucrtbase.dll
- Size 1.1MB
- SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
- MD5 3b337c2d41069b0a1e43e30f891c3813
- SHA1 ebee2827b5cb153cbbb51c9718da1549fa80fc5c
- SHA512 fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499
- SSDEEP 24576:CJG2BrB3ZQAq0AT2jS9HKHdK6AccMs1wmxvSZX0ypFi:0VGrT6SAk3ei
- TLSH T1EC359D64B76C02A9C97BE13DC927554AFA73380147709ACB03E74AB93E2B7E552B7310
- MD5 SHA1 SHA512 SSDEEP TLSH