b19990f9cba214c2c34ac8a123a42626b6477dd90dab32999949ea7af61a82eb

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 16:11

Target
IDTOKEN-main/IDTOKEN.exe
Size 6.7MB
Sample261023-tncgcadb89
SHA256 b19990f9cba214c2c34ac8a123a42626b6477dd90dab32999949ea7af61a82eb
MD5 b89f18d9400abc9737ed94a3845604fe
SHA1 af98b5f756a394ee460427b40837a395d5b8420e
SHA512 b8115cc024469b2716b093268d90ed6a3256c7d9be34c88e0a07a8db0188eac25fe1d1ae5e791c4e3008157e922ca9b3d6e2bba24079415ca5456cdb62b75f8c
SSDEEP 196608:m/yoqdQmR5dA6lsuErSEEJwdF6OLhYPXk0:Z9dQ2ls+9JOLh8
TLSH
T1196633A662613CEAE81F417AC082C620E7627D261391F27F17E58FA71F5B6B01D3F611
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 4 IoCs

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 4652	4120	IDTOKEN.exe	90

C:\Users\Admin\AppData\Local\Temp\IDTOKEN-main\IDTOKEN.exe
"C:\Users\Admin\AppData\Local\Temp\IDTOKEN-main\IDTOKEN.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Users\Admin\AppData\Local\Temp\IDTOKEN-main\IDTOKEN.exe
  "C:\Users\Admin\AppData\Local\Temp\IDTOKEN-main\IDTOKEN.exe"
  2⤵
  - Loads dropped DLL
  PID:4652

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI41202\VCRUNTIME140.dll
Size 106KB
SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
MD5 870fea4e961e2fbd00110d3783e529be
SHA1 a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA512 0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
SSDEEP 1536:DcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/Auecbq8qZU34zW/K0zD:DV3iC0h9q4v6XjKAuecbq8qGISb/
TLSH
T141B36B46B2A442F7C4AAD1B4C2A38A47FB70B5418770A3CF03B58A690F63BE15E3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI41202\_ctypes.pyd
Size 120KB
SHA256 af598ae52ddc6869f24d36a483b77988385a5bbbf4618b2e2630d89d10a107ee
MD5 df6be515e183a0e4dbe9cdda17836664
SHA1 a5e8796189631c1aaca6b1c40bc5a23eb20b85db
SHA512 b3f23530de7386cc4dcf6ad39141240e56d36322e3d4041e40d69d80dd529d1f8ef5f65b55cdca9641e378603b5252acfe5d50f39f0c6032fd4c307f73ef9253
SSDEEP 3072:aBxSn2prY3+52vWqw9RQfLIgRr5kNIgQPUZxhT:acuY3+uWHQfLIIkFT
TLSH
T169C35B1B2354009AEAA7407CC5B35E47DBB1B459572087CF02A4CA9E2F637E36E7E706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI41202\base_library.zip
Size 1.7MB
SHA256 b8e074772e3f8203de0e4313ac274de4d4e5b5e847a3fe3dc4171413ea2a4502
MD5 c6b150f2eca4eec01765bdae9a78e097
SHA1 1eaf2a18863af05d4f8183978ea6ecadd21ed3de
SHA512 697cdcd1f23cf67683836cca593df643f3f2d3f139fdbf86bf990bd7c29a6721d8199fbff491cb234d2fb65bcd4f32f07796b8b522b895a52095d17628beb846
SSDEEP 24576:mQR5pATt7xm4lUKdcubgAnyfbGz0iwhaM+dYf9PIsfvTZLdma0uHHf:mQR5pQxmiT8NLga3
TLSH
T11C852B817992B5B7F804F3BA4026090DB328C5F4FB40C75739AFC1A6AF9E6A46D518DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI41202\libffi-8.dll
Size 37KB
SHA256 68fba9dd89bfad35f8fd657b9af22a8aebda31bffda35058a7f5ae376136e89b
MD5 d86a9d75380fab7640bb950aeb05e50e
SHA1 1c61aaf9022cd1f09a959f7b2a65fb1372d187d7
SHA512 18437e64061221be411a1587f634b4b8efa60e661dbc35fd96a6d0e7eff812752de0ada755c01f286efefc47fb5f2daf07953b4cfc4119121b6bee7756c88d0f
SSDEEP 768:4iQfxQemQJNrPN+mGyijAeYiSyvOPxWESW7t:YfxIQvPkmGyijj7SymPxlp
TLSH
T18C036C0B518418A4E657D53D87B65A26C334B9280B61F2CB03D4C27A2F6B7D6EB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI41202\python311.dll
Size 5.5MB
SHA256 aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038
MD5 a72993488cecd88b3e19487d646f88f6
SHA1 5d359f4121e0be04a483f9ad1d8203ffc958f9a0
SHA512 c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38
SSDEEP 98304:qvpgHup+dhRXLPw3W47SrSUHfMWdPrjUOYmIF:qvpgHup+XJrYWYWdjUOYmU
TLSH
T1CE467C22726584A4C97B8076EA2F8647D7B27C505F20CB0B61A4B7992F33B531EEF345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download