Analysis
- max time kernel
109s - max time network
89s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 04:26
Behavioral task
behavioral1
Sample
memz.exe
Resource
win10v2004-20260911-en
2 signatures
30 seconds
General
- Target memz.exe
- Size 7.0MB
- Sample261014-e2gwnav13q
- SHA256 ed8189580bdc602509398457b43d127a9cd19efa511a4a15d2728445e79b9742
- MD5 e39430c869d680c7e8e78d3f93b405bf
- SHA1 8603ec1243d8689d03b7e45ba40eb9bc3961a2ab
- SHA512 655965c5c78727da8dd124b50c88af3d3547eb4bdb1f9735b469087a9a8d9d10667862f78ebc23f81102a42566404046e98ba494ebacaeb12651951e328d23a6
- SSDEEP 196608:xpKAZcxwuLlA1HeT39Iigp1ncKOVVtk7xBtQcNP+P:H7cqr1+TtIiW0VQj6Z
- TLSH T13876331173E21CF9D96B543E88A2CE65DAB2BC195331C5CF53E44AC32F631919E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 4932 memz.exe 4932 memz.exe 4932 memz.exe 4932 memz.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2124 wrote to memory of 4932 2124 memz.exe 88
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\VCRUNTIME140.dll
- Size 116KB
- SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
- MD5 be8dbe2dc77ebe7f88f910c61aec691a
- SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
- SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
- SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
- TLSH T1C4C37C4673A402B7D52EC274C1E25A06EB71B5448770ABCF03B589AA0F53BE1AF3D359
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_bz2.pyd
- Size 83KB
- SHA256 3ed0e5058d370fb14aa5469d81f96c5685559c054917c7280dd4125f21d25f62
- MD5 5bebc32957922fe20e927d5c4637f100
- SHA1 a94ea93ee3c3d154f4f90b5c2fe072cc273376b3
- SHA512 afbe80a73ee9bd63d9ffa4628273019400a75f75454667440f43beb253091584bf9128cbb78ae7b659ce67a5faefdba726edb37987a4fe92f082d009d523d5d6
- SSDEEP 1536:i2sz7yc51BVo1QX/FPI11IK1cDm015ssO687sjkD1ISCV087Syyxt+:dsz2c5eQXB4am05spd7MkD1ISCVzL
- TLSH T1D8839E92E3956AF5F81F81BD56C1036AE771B954075083EFF348C25A2F02F816DAC36A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_ctypes.pyd
- Size 122KB
- SHA256 74e0e8384f6c2503215f4cf64c92efe7257f1aec44f72d67ad37dc8ba2530bc1
- MD5 fb454c5e74582a805bc5e9f3da8edc7b
- SHA1 782c3fa39393112275120eaf62fc6579c36b5cf8
- SHA512 727ada80098f07849102c76b484e9a61fb0f7da328c0276d82c6ee08213682c89deeb8459139a3fbd7f561bffaca91650a429e1b3a1ff8f341cebdf0bfa9b65d
- SSDEEP 3072:CXw32spTVYgFoj6N2xE9sb7VFf/EkZBq5syCtYPU9pISLPTj:CgGEOgFoj68ksTf/ENs7
- TLSH T138C36C0B339400AAEBA34179C8B36E07D7F1B41B175183CF1294C69A2F637A76E6E315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_decimal.pyd
- Size 251KB
- SHA256 b8221d1c9e2c892dd6227a6042d1e49200cd5cb82adbd998e4a77f4ee0e9abf1
- MD5 492c0c36d8ed1b6ca2117869a09214da
- SHA1 b741cae3e2c9954e726890292fa35034509ef0f6
- SHA512 b8f1c64ad94db0252d96082e73a8632412d1d73fb8095541ee423df6f00bc417a2b42c76f15d7e014e27baae0ef50311c3f768b1560db005a522373f442e4be0
- SSDEEP 6144:vnXBJvhy8AJOMg4hmRWw710z4ez9qWM53pLW1AW/ZJJJWtCk1mGc:ByJJOMiRW+10EHFpNc
- TLSH T11E446C17A2490CA4DE73807488979B57E7B278960360D7CF43B48AA76F573A323BE744
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_hashlib.pyd
- Size 64KB
- SHA256 fd77a5756a17ec0788989f73222b0e7334dd4494b8c8647b43fe554cf3cfb354
- MD5 da02cefd8151ecb83f697e3bd5280775
- SHA1 1c5d0437eb7e87842fde55241a5f0ca7f0fc25e7
- SHA512 a13bc5c481730f48808905f872d92cb8729cc52cfb4d5345153ce361e7d6586603a58b964a1ebfd77dd6222b074e5dcca176eaaefecc39f75496b1f8387a2283
- SSDEEP 1536:JgHpgE4Z27b4ZWZnEmIAtISOIx7SyZUxN:i14ZeEmIAtISOIx7+
- TLSH T1D9538D09A69544E8C96781B8C8A35F57FAF2F1511B10A7DF0368C18D2F237C3A7BA752
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_lzma.pyd
- Size 156KB
- SHA256 7bf9ff61babebd90c499a8ed9b62141f947f90d87e0bbd41a12e99d20e06954a
- MD5 195defe58a7549117e06a57029079702
- SHA1 3795b02803ca37f399d8883d30c0aa38ad77b5f2
- SHA512 c47a9b1066dd9744c51ed80215bd9645aab6cc9d6a3f9df99f618e3dd784f6c7ce6f53eabe222cf134ee649250834193d5973e6e88f8a93151886537c62e2e2b
- SSDEEP 3072:Bsvkxuqgo7e2uONqG+hi+CSznfF9mNopXnmnu1ISZ1Vk:BnuFo7Jg1NYOp2uO
- TLSH T1ADF33992A394F0D5F6728C78D6624F17D7F6780A0320929A02CCD37D2B1FB759A2A317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\_socket.pyd
- Size 81KB
- SHA256 b102522c23dac2332511eb3502466caf842d6bcd092fbc276b7b55e9cc01b085
- MD5 dd8ff2a3946b8e77264e3f0011d27704
- SHA1 a2d84cfc4d6410b80eea4b25e8efc08498f78990
- SHA512 958224a974a3449bcfb97faab70c0a5b594fa130adc0c83b4e15bdd7aab366b58d94a4a9016cb662329ea47558645acd0e0cc6df54f12a81ac13a6ec0c895cd8
- SSDEEP 1536:ldcydNgIznrvGvLfo4o7zfqwXJ9/s+S+pzo08/n1IsJhv6cpISLwV97Sy7UxV:l6ydrr+DgxjqwXJ9/sT+pzoN1IwhScpf
- TLSH T15D835A11A69050FADB77C0B5C2675E22FBB0B5C01395938F1166C51E1F33782BEBAB92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\base_library.zip
- Size 1.3MB
- SHA256 c611943f0aeb3292d049437cb03500cc2f8d12f23faf55e644bca82f43679bc0
- MD5 43935f81d0c08e8ab1dfe88d65af86d8
- SHA1 abb6eae98264ee4209b81996c956a010ecf9159b
- SHA512 06a9dcd310aa538664b08f817ec1c6cfa3f748810d76559c46878ea90796804904d41ac79535c7f63114df34c0e5de6d0452bb30df54b77118d925f21cfa1955
- SSDEEP 12288:NttcY+bS4OmE1jc+fYNXPh26UZWAzDX7jOIqL3QtltIrdmoPFHz1dc+4/BaYcUz:NttcY+NHSPD/eMKrdmoPxzFcaYcUz
- TLSH T14755D6817A92A5B3FC84F3BA04260A0EA3658571BF45C747389FC5E46F8F2E49E914DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\libcrypto-3.dll
- Size 5.0MB
- SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
- MD5 e547cf6d296a88f5b1c352c116df7c0c
- SHA1 cafa14e0367f7c13ad140fd556f10f320a039783
- SHA512 9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d
- SSDEEP 98304:n3+pefu6fSar+SJ8aqfPomg1CPwDvt3uFlDCE:3G+u6fb+SJ8aqfwmg1CPwDvt3uFlDCE
- TLSH T1E6366A6AA7A80188E5BAC13CCA534617D6B1F816577097CF19A1967C0F33FDA2B3DB40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\python312.dll
- Size 6.6MB
- SHA256 21700f0bad5769a1b61ea408dc0a140ffd0a356a774c6eb0cc70e574b929d2e2
- MD5 d521654d889666a0bc753320f071ef60
- SHA1 5fd9b90c5d0527e53c199f94bad540c1e0985db6
- SHA512 7a726835423a36de80fb29ef65dfe7150bd1567cac6f3569e24d9fe091496c807556d0150456429a3d1a6fd2ed0b8ae3128ea3b8674c97f42ce7c897719d2cd3
- SSDEEP 49152:PPknDqOJlpxSupRo2vXDZ2lgghXQIX2CG4Ts99kdwQAvyodh1GCOepxk1NHh8yfE:kdlpx9p5Loehv6JfDvXHDMiETH+0Tn
- TLSH T1A6666B5A7258C0A9C967A0B48C13C29FE7B27C117F50830B31EBB75E2FB3792925A745
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\select.pyd
- Size 30KB
- SHA256 411d6f538bdbaf60f1a1798fa8aa7ed3a4e8fcc99c9f9f10d21270d2f3742019
- MD5 d0cc9fc9a0650ba00bd206720223493b
- SHA1 295bc204e489572b74cc11801ed8590f808e1618
- SHA512 d3ebcb91d1b8aa247d50c2c4b2ba1bf3102317c593cbf6c63883e8bf9d6e50c0a40f149654797abc5b4f17aee282ddd972a8cd9189bfcd5b9cec5ab9c341e20b
- SSDEEP 384:2RVBC9t6Lhz64wHqFslDT90YpISQGrHQIYiSy1pCQ+42AM+o/8E9VF0Nyes:YGyIHqG1HpISQG75YiSyvB2AMxkEp
- TLSH T10DD28F476B60688AD923C97268A64E27DD35B752871182CF3358C15D1F227C27BBB3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI21242\unicodedata.pyd
- Size 1.1MB
- SHA256 bc2cf23b7b7491edcf03103b78dbaf42afd84a60ea71e764af9a1ddd0fe84268
- MD5 cc8142bedafdfaa50b26c6d07755c7a6
- SHA1 0fcab5816eaf7b138f22c29c6d5b5f59551b39fe
- SHA512 c3b0c1dbe5bf159ab7706f314a75a856a08ebb889f53fe22ab3ec92b35b5e211edab3934df3da64ebea76f38eb9bfc9504db8d7546a36bc3cabe40c5599a9cbd
- SSDEEP 12288:LrEHdcM6hbqCjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfcAjL:LrEXPCjfk7bPNfv42BN6yzUAjL
- TLSH T1D3355AC5BB828E66E87B31B944D1212F1361C273476B533BB25513294C8B3B74EE69EC
- MD5 SHA1 SHA512 SSDEEP TLSH