1c8ace9a9ff61bc337f26e561a9a34b76d82b6db05a08b0b835df41b419e9022

Analysis

user interaction
yes
max time kernel
298s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 00:40

Target
net8.0-windows.rar
Size 73KB
Sample261023-a1chbsbs8r
SHA256 1c8ace9a9ff61bc337f26e561a9a34b76d82b6db05a08b0b835df41b419e9022
MD5 ec4fa301a8e08a319ff7123b051c9870
SHA1 c6684053bd4fbaebf296568fe225783bd0b9c2aa
SHA512 ca24a974b47d7d8d7773ddf6ff133c87ccbe8883831712b2f1b4f968831e5a6572c1f8447ac6e8d86a9c372e0009baf2c165b846dfaa4b5419f7718836c12718
SSDEEP 1536:yOywc1yy8qYnJbacZLprKc3gH9IgMdbxv1fu5qCm9vKAwhb:ewc4ycJLLAaglMdbxv1d9vKdp
TLSH
T1CC73123170A834E2F5A510D372C6F947DA7F26AADED1D68B65F4C0847F90A36C4AC2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2084	Mei Mei Virus.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3604	7zFM.exe
3604	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3604	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
3604	7zFM.exe
3604	7zFM.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3604 wrote to memory of 2084	3604	7zFM.exe	89

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\net8.0-windows.rar"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3604
- C:\Users\Admin\AppData\Local\Temp\7zO41E3E329\Mei Mei Virus.exe
  "C:\Users\Admin\AppData\Local\Temp\7zO41E3E329\Mei Mei Virus.exe"
  2⤵
  - Executes dropped EXE
  PID:2084

Mei Mei Virus.exe

Path C:\Users\Admin\AppData\Local\Temp\7zO41E3E329\Mei Mei Virus.exe
Size 148KB
SHA256 54e1d39b694b5ffb086042f0fc0d8e1bc415fba3aa80600be41e82214ebb5dad
MD5 26f50ac20674cbeaf1ed393d5713433c
SHA1 3e4f80e26380d4ccda3ace12c4500efa5e3c3526
SHA512 f57eb4244accdbfd4fbcf091dcf82eadf2a380aa1207baf7d0b9e4e4b84c52c436e5f852e0ef08ba2ecdf3b9f2473f390a3cb5a300054631507eed666f9af927
SSDEEP 3072:gqeXA/4yIg9vkNPNu6H6xCYOiEUE265jJy:gvgvkNFNaxm0EDJ
TLSH
T174E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download