Analysis
- user interaction
yes - max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/10/2026, 17:58
Behavioral task
behavioral1
Sample
iw4l-skate-convert.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
iw4l-skate-convert.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
iw4l_skate_convert.pyc
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
iw4l_skate_convert.pyc
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target iw4l-skate-convert.exe
- Size 27.1MB
- Sample261015-wkavfsdf36
- SHA256 94ea891158d6d9c2f46155a6c229319861a659d31a37c0a6873e435750f6dc29
- MD5 9c1b947bb6004fa77db521def76a9dd0
- SHA1 049740ce32426329d9442a23d9f54d46f64f5de8
- SHA512 153f39c22c422c630f89501611599adf0d8852886164717055daf7809f5edd56989c3036c9a2f4a99d9b536f4693f284f8fbc0c2952b3cc2aa1f563345d2fcd8
- SSDEEP 786432:KY0W0b4Eno7L+XG0qaV+sEbnFiVxPVx5AdaxIRoW4rw/q:KYxhy7GNaV+BbnYPVx5AdkW9S
- TLSH T1BC5733D466A405AFEEA3477ECDA2A82B473AECA56772C50B02E442436F5B7D15C3D303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 11 IoCs
pid Process 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe 3908 iw4l-skate-convert.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3388 wrote to memory of 3908 3388 iw4l-skate-convert.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3388 -
C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"C:\Users\Admin\AppData\Local\Temp\iw4l-skate-convert.exe"2⤵
- Loads dropped DLL
PID:3908
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\VCRUNTIME140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_bz2.pyd
- Size 71KB
- SHA256 49b5119a4e6e2ef4cd5c69d5287c0eb4ab16c79565a22275a0385c06dc4eca9f
- MD5 5c8af203c3872e5c518fec32cc76cc27
- SHA1 9cf5e97b96a2fcb2400fcfa7e1edcfbaa3e17c15
- SHA512 253eb021595b3c1d560ec9b82d7047d558b2c675374dd49e196594e7dc0c224cddb321207670499b0ebbaecb85245b4d66cd08a0affc4b1b4849b4dbf37d22b1
- SSDEEP 1536:0b5kg26z7OJgqXzmPH4kEN/x9NrxCbG8ULI6Bs8yDZ0IeIeLV:ikg26ziaqavEFxUbxUxC8yCbIeLV
- TLSH T13A635B82F3A552F5E59BD1F9898503A3F730BA540750A3EFE148869A3F12FE02DB8315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_ctypes.pyd
- Size 120KB
- SHA256 74532a9f21557653b01c2148c58249d2e4be201d3718c5297dd4fc12d190e24f
- MD5 33b41d25144e3d47c5cbda43800f551a
- SHA1 5e71f3387b4ce278985debbed3829094050304d2
- SHA512 f160b3926acd3a7878650607bbc59edf7d27cedcc567454cfed297f514ad098c2eaa5f8a617c86b18e217e577c3fa20fa4205363631a0de6f29fa7c4dbf202cc
- SSDEEP 3072:25mQSLXwacOPUZBY5yJMxAf/FegqT0JrscIavIeyP:2QRXwacOPikaf/FJO2rsI
- TLSH T14CC36C0B739801AAD6A78178C5332E47DBF1B45A131147CF02A4CA9A3F63792AE7F751
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_lzma.pyd
- Size 149KB
- SHA256 277b0ca50c1ff8fcd1ff137bc266bffa64b7ea42a80dbee83ff4c619da443f1b
- MD5 af46f82c4ec4c6c05751ac138498ebde
- SHA1 668a0bc6034d3f3f35bffc0ee5bd1ff5d0fca56a
- SHA512 1ef36828bf82acaf8cb583ae09c2b8b5d920005fbd5f350e5d7ac5709929f1a5046c8426f56655c76c2d81927518df349bedce387369619b3f62961f2b8d0507
- SSDEEP 3072:RoAWgUAD4eqnou/IgqLI0v4znf59mNokq8a3N+8fxoGbIe01:+UUAc/BiD2BYOkW3fF
- TLSH T1ADE31791B254F0D6F2228C34C9264F27E7F978495310929F01DD837D2B6FBB66A6A313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\_socket.pyd
- Size 71KB
- SHA256 e01f4d1a9f7076183f8def6893bfc9bb9f167fc2d8bc2120fc91cd685ead915e
- MD5 f6936eeec80b6c3791298984d10604c6
- SHA1 4478e7e09391920bd6db83fbf3885afe3dd9e341
- SHA512 6463914b4e9da7c7655e692c2cf97c341f9e89d285f6eb1abe2f4cc727a8f4933d31d43b81c1c2b441f8462056201927d4cc9cf8a10b87200d0441b53e461b70
- SSDEEP 1536:5mU9edcgRPexLNB4V8ypTEQlyJ+9+nzmmK4KxtS4x0I6Ieyw:5h9edNYdypTEQlyJs+nzmsKxBWvIeyw
- TLSH T124634B01A69051F9EB72C076C6235F62FBB4B4C01395A3DF0566C9691F337C2AE79B82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\base_library.zip
- Size 1.3MB
- SHA256 8bdfc1725fe7b6d01fd382b2918841d22c9a613c79f97efbe5f51b0114327a59
- MD5 a1d4735760a65f6172210fe1d62ee37e
- SHA1 4f1fab3435340fd087d305a9dca5e124894c77ed
- SHA512 b51b35863a1827ea55bf54f5cc02edcd864e317461f7ad30cebb7bb23e8760e0ae9b98f9a5c717ed0a0f9e2c6aca551efcfab4583ae294dad7d79b1e749d4cdf
- SSDEEP 12288:rp5dtYzGNcT1AizW7Wp8SL+DHzwtyuIva80201jwCVRDVoioSYB4i2cPPdxhYGJa:ESeT1k7Wp8Bz5l45cPPdxhYZdZ9qBI
- TLSH T142551992B9527953FF64F37B80B7484CF31E86A2EF00C207355E42661EFE6B09E59588
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\libffi-8.dll
- Size 27KB
- SHA256 79291f533489403ea6f04ac275e73239f52be3e2c3b6814ab339a1b0ce8e754e
- MD5 d1a1b3a912aa4d7a05f29092827f42a5
- SHA1 d9c6ecd2310644c73a1419cf0850a860de82c055
- SHA512 14fa66a260cdaaf397777624ea3fa7558c2d9a81a65306db605746ea3d80214c014823afb2b76d3845a27b9f2c87f0921902f012afb07a9df66270706d10fd60
- SSDEEP 384:tx8D8ww0HVoZDIpOsdS9L99PlYoA5/rUeUq8COB3MTWjRCXy830u:kEfl9bYNZM3MaTO0u
- TLSH T1DFC22A47A28445B8E267C13D86379D5AC235B9751721F6CF03E092AF2E6B6E8DA3C305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\python3.DLL
- Size 57KB
- SHA256 e145e3a5886f4322410986fba1c05eb8a05e5c9bd847a90390d89e6387a28a07
- MD5 ed54555785066bd42420b28da855333d
- SHA1 91f96e3a0b72986040890f23f7c615067343c8e4
- SHA512 81d97dbe497a8bd5a5e3091ea3d149afa93b76db5ac956b165182b5bf2dc15cb1e380db8221cbdfa422bc7855ac248b73cc3a6bd6693c269ee0139f5569a3d79
- SSDEEP 768:kjQEotsskOv6pWVCB4p/uKlZPRQcFIc9qunV0Jku/YFI1Hu1wEBbCpVNyD6VdPx:MotssyKcunV8Pn0I6Iey0
- TLSH T1A043F8C26B57F8A2D6F665FC38DE99CD141B02CC932A8DDFA57893920F1A310A12774D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\python313.dll
- Size 5.8MB
- SHA256 6d9285ecfc01da7a6039ae5c09d07a6d145492ca2f564bd7cc0cd6238ccf5638
- MD5 c71ca67d0b3890387a6be0458c6cd977
- SHA1 019ce622c8e68df1d72986699222919f91231a79
- SHA512 092ae50f3a3b2c9a632e31439d444039a5c19168af523928c9244e5bc139c537e4984e07b35774ebb6d0d25effb61e51ff57a5b35e4aa675d6305b1fafae0a43
- SSDEEP 98304:SLqLXCWR9y03YaE7yQaIftT8KvXHDMiEVmO/s:cqLXfpIaE7hMi9O/s
- TLSH T124567C12729E41ACD97B8078CA13864BFBB27C513F60534B61E6BB5E2F73362066E705
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\select.pyd
- Size 18KB
- SHA256 e9456fe7399f7b5bc06518b8b2506119539d4886b96f9be14b28a3acf4a95f72
- MD5 a24dfc88dd877060592d8fb8393e4821
- SHA1 b43abed6101fad91aa8e559a6a2d91353ced9d96
- SHA512 8849204753109d476ebccdc4bdc74050403e61fc33728d8c4b38fb0a8a3031f942e2a4b4ccc85fcddb6fad5ab4a1b0b8a19f819ce77313afa77829cf20622456
- SSDEEP 384:xpjg7ayqJPyJGfLl//VdHf0ijEvefH8Qoa0sj6Ie9Gx:/SW1dHfOmH3R0I6Ie9G
- TLSH T146824B46BB7460D6E1B2C27289235F02D936B532472253DF63B4456D3F67BC2AB36B40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33882\ucrtbase.dll
- Size 1.3MB
- SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
- MD5 286b308df8012a5dfc4276fb16dd9ccc
- SHA1 8ae9df813b281c2bd7a81de1e4e9cef8934a9120
- SHA512 24166cc1477cde129a9ab5b71075a6d935eb6eebcae9b39c0a106c5394ded31af3d93f6dea147120243f7790d0a0c625a690fd76177dddab2d2685105c3eb7b2
- SSDEEP 24576:cQPuhXCFmugCw3wUAZMMNX6smpRrgTuJi+1Sats7F9qmxvSZX0ypKpIPng:cQWhXCFm7Cw3w3ZXX6DYaY9lpUg
- TLSH T1BE55AE2266AD01E9C5BFD13DC65B4906E9B2781503709ACB03E94E792E3BBF5077B321
- MD5 SHA1 SHA512 SSDEEP TLSH