Analysis

  • user interaction
    yes
  • max time kernel
    76s
  • max time network
    31s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/10/2026, 12:30

General

  • Target
    Furry.exe
  • Size 35.1MB
  • Sample261017-ppf4pse18p
  • SHA256 6729f82b50963657eb30f2a7c5b9614e7a922eebba849b0db8bb60f6e3811139
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 55 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Furry.exe
    "C:\Users\Admin\AppData\Local\Temp\Furry.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Users\Admin\AppData\Local\Temp\Furry.exe
      "C:\Users\Admin\AppData\Local\Temp\Furry.exe"
      2⤵
      • Loads dropped DLL
      PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\PIL\_imaging.cp313-win_amd64.pyd
        • Size 2.4MB
        • SHA256 010808cd1eb564aeaee8ba65ab2e20ae07f9bd9cbab8dba1d88931bc6842de0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _imagingft.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\PIL\_imagingft.cp313-win_amd64.pyd
        • Size 1.9MB
        • SHA256 c830239b96cc467ba4c8e3f398f96fa803c2566b7fa6c7155f19ff1c6fcd991d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDL2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\SDL2.dll
        • Size 2.4MB
        • SHA256 520d0459b91efa32fbccf9027a9ca1fc5aae657e679ce8e90f179f9cf5afd279
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDL2_image.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\SDL2_image.dll
        • Size 122KB
        • SHA256 1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDL2_mixer.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\SDL2_mixer.dll
        • Size 285KB
        • SHA256 2a0fc5e9f72c2eaec3240cb82b7594a58ccda609485981f256b94d0a4dd8d6f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SDL2_ttf.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\SDL2_ttf.dll
        • Size 1.5MB
        • SHA256 fcdfabdfce868eb33f7514025ff59c1bb6c418f1bcd6ace2300a9cd4053e1d63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_asyncio.pyd
        • Size 70KB
        • SHA256 a5341a74bbec1ddc807c0236fcb6bfaceaf3b957eb69cdd9bca00657eb5e42b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_bz2.pyd
        • Size 83KB
        • SHA256 449058efc99fccb9e24d640084d845c78f3f86dd34c5c126cf69e523d6320d75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_ctypes.pyd
        • Size 130KB
        • SHA256 5c0d5082fba1a2a3eb8d5e23073be25164c19f21304b09cecaab340dc7198815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_decimal.pyd
        • Size 273KB
        • SHA256 4e27c06b84401039d10f800a0f06446b58508784ee366c7c8324d8fe9794e1a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _elementtree.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_elementtree.pyd
        • Size 132KB
        • SHA256 fe09d0408aab3a6faa71467f78433df4c7f3ad0b033bb72ec43bde85abf6dcfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_hashlib.pyd
        • Size 63KB
        • SHA256 52f29aebe9886e830dedc363cd64eb53b6830d84b26e14f1b6faa655a0900b5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_lzma.pyd
        • Size 155KB
        • SHA256 48f16b587c6faa44a9e073365b19599200b0f0a0ccb70121e76c2dac4ed53281
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_multiprocessing.pyd
        • Size 37KB
        • SHA256 82253e2d6ec717b317e26ed7dd141aadaea6cb55a9d0fee022a67d52b404fd06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _overlapped.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_overlapped.pyd
        • Size 55KB
        • SHA256 7983f811ccd9c99c6db34b653339605ea45eb384f5e88a8b23ccf9fa5f0170d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_queue.pyd
        • Size 34KB
        • SHA256 af8ac8ab8b39f53b5dc192fbf58ad704a709db34e69753b97b83d087202e3a36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_socket.pyd
        • Size 83KB
        • SHA256 bced17d6f081d81ea7cd92f1e071e38f8840e61ee0fe1524221b776bcfa78650
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_ssl.pyd
        • Size 177KB
        • SHA256 3301ff340d26495c95108199b67fdf3402742d13070af8b6bf4eb2e0c5e13781
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_tkinter.pyd
        • Size 67KB
        • SHA256 7d163581822bdcdb94cee24115c37a511cb6bd880b007fc7e5cc5099fac58506
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _wmi.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\_wmi.pyd
        • Size 38KB
        • SHA256 ebd252d21af9c84128fca04c994093a5bd6ee857f1581f06f4026fdd6a2c40e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\base_library.zip
        • Size 1.3MB
        • SHA256 587058b04dcd4d276bc9fb7a99a4ab429fd32a29933f90b527bb9b49cbd17111
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freetype.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\freetype.dll
        • Size 639KB
        • SHA256 1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libjpeg-9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libjpeg-9.dll
        • Size 238KB
        • SHA256 3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libmodplug-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libmodplug-1.dll
        • Size 259KB
        • SHA256 0c1a9032812ec4c20003a997423e67b71ecb5e59d62cdc18a5bf591176a9010e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libogg-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libogg-0.dll
        • Size 25KB
        • SHA256 57abc4f6a9accdd08bf9a2b022a66640cc626a5bd4dac6c7c4f06a5df61ee1fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libopus-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libopus-0.dll
        • Size 359KB
        • SHA256 771cae79410f7fcc4f993a105a18c4ed9e8cbddd6f807a42228d95f575808806
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libopusfile-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libopusfile-0.dll
        • Size 45KB
        • SHA256 ccaaca81810bd2d1cab4692b4253a639f8d5516996db0e24d881efd3efdcc6a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpng16-16.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libpng16-16.dll
        • Size 206KB
        • SHA256 e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libtiff-5.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libtiff-5.dll
        • Size 422KB
        • SHA256 ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libwebp-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\libwebp-7.dll
        • Size 437KB
        • SHA256 9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libscipy_openblas64_-860d95b1c38e637ce4509f5fa24fbf2a.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\numpy.libs\libscipy_openblas64_-860d95b1c38e637ce4509f5fa24fbf2a.dll
        • Size 19.5MB
        • SHA256 860d95b1c38e637ce4509f5fa24fbf2a98ba8696f9f3d28bf184bee74ad9a325
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\numpy.libs\msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll
        • Size 561KB
        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiarray_umath.cp313-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\numpy\_core\_multiarray_umath.cp313-win_amd64.pyd
        • Size 4.3MB
        • SHA256 132dc29d6f8b16bc7362b59a837098a78a5e4c01e81b7832102eb0fc9c135e27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        portmidi.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\portmidi.dll
        • Size 41KB
        • SHA256 c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013
        • MD5 SHA1 SHA512 SSDEEP TLSH

        print.png

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\print.png
        • Size 24KB
        • SHA256 0818b5f7db2dc9365efabcc4c271ae6a24a597b4430cbd2b55fe706e75e0c46e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\pyexpat.pyd
        • Size 200KB
        • SHA256 554bbc65bfe8c19ba9bbd94f18977a8131109c6a4d64306778bd12250c2c5c56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\python313.dll
        • Size 5.8MB
        • SHA256 69fd86ea29370697c203f7e12830084f920f490766a8e3045af52c036a9ad529
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\select.pyd
        • Size 31KB
        • SHA256 6393121130a3e85d0f6562948024d8614c4c144b84ab102af711c638344d1599
        • MD5 SHA1 SHA512 SSDEEP TLSH

        step_sound.mp3

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\step_sound.mp3
        • Size 8KB
        • SHA256 3b15fbc986e22e148d322e3d7bce7dd9fcae52e5f81813d844333a1d9926a9aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\tcl86t.dll
        • Size 1.8MB
        • SHA256 137972bf582984df7ffe8983fa66d92dba6cc5887fe6784ffe1165bab57304b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\tk86t.dll
        • Size 1.5MB
        • SHA256 ddc6b69c3897ddf3ea9fdfb4b4a6b9c3a667958d4dbf6b4bbcc50c93eb341370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\unicodedata.pyd
        • Size 695KB
        • SHA256 071494856fdad0042964769aa2fb1de4ea95c2cfcbe27cc7132293c68d13d710
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI30362\zlib1.dll
        • Size 106KB
        • SHA256 b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3028-1105-0x0000000062E80000-0x0000000062EA4000-memory.dmp

        memory/3028-1107-0x00007FFF59320000-0x00007FFF5958C000-memory.dmp

        memory/3028-1106-0x0000022952D20000-0x000002295409E000-memory.dmp

        memory/3028-1110-0x00007FFF59320000-0x00007FFF5958C000-memory.dmp