Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    136s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/10/2026, 17:58

General

  • Target
    iw4l-skate-convert.exe
  • Size 27.1MB
  • Sample261015-wkavfsdf36
  • SHA256 94ea891158d6d9c2f46155a6c229319861a659d31a37c0a6873e435750f6dc29
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe
    "C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3388
    • C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe
      "C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"
      2⤵
      • Loads dropped DLL
      PID:3908

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\VCRUNTIME140.dll
        • Size 121KB
        • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_bz2.pyd
        • Size 71KB
        • SHA256 49b5119a4e6e2ef4cd5c69d5287c0eb4ab16c79565a22275a0385c06dc4eca9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_ctypes.pyd
        • Size 120KB
        • SHA256 74532a9f21557653b01c2148c58249d2e4be201d3718c5297dd4fc12d190e24f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_lzma.pyd
        • Size 149KB
        • SHA256 277b0ca50c1ff8fcd1ff137bc266bffa64b7ea42a80dbee83ff4c619da443f1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_socket.pyd
        • Size 71KB
        • SHA256 e01f4d1a9f7076183f8def6893bfc9bb9f167fc2d8bc2120fc91cd685ead915e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\base_library.zip
        • Size 1.3MB
        • SHA256 8bdfc1725fe7b6d01fd382b2918841d22c9a613c79f97efbe5f51b0114327a59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\libffi-8.dll
        • Size 27KB
        • SHA256 79291f533489403ea6f04ac275e73239f52be3e2c3b6814ab339a1b0ce8e754e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\python3.DLL
        • Size 57KB
        • SHA256 e145e3a5886f4322410986fba1c05eb8a05e5c9bd847a90390d89e6387a28a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\python313.dll
        • Size 5.8MB
        • SHA256 6d9285ecfc01da7a6039ae5c09d07a6d145492ca2f564bd7cc0cd6238ccf5638
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\select.pyd
        • Size 18KB
        • SHA256 e9456fe7399f7b5bc06518b8b2506119539d4886b96f9be14b28a3acf4a95f72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\ucrtbase.dll
        • Size 1.3MB
        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
        • MD5 SHA1 SHA512 SSDEEP TLSH