Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 19:56

General

  • Target
    spider_test.exe
  • Size 31.6MB
  • Sample261027-yn248at19k
  • SHA256 62ccb52521f72e3ff84e5288e582d390e11e169cf71340518619f61bce37fd10
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 34 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\spider_test.exe
    "C:\Users\Admin\AppData\Local\Temp\spider_test.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5448
    • C:\Users\Admin\AppData\Local\Temp\spider_test.exe
      "C:\Users\Admin\AppData\Local\Temp\spider_test.exe"
      2⤵
      • Loads dropped DLL
      PID:3580

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _Salsa20.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Cipher\_Salsa20.pyd
        • Size 13KB
        • SHA256 9df33c5ee086899c69bd4f3d776b85a493b72e1316c3f8772ac1215d70068a28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _raw_aes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Cipher\_raw_aes.pyd
        • Size 34KB
        • SHA256 520b343e44b5633bbc4fdcecc705a7f2eb6e55d082a1f3e4723ada9d7e5ea97d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _raw_aesni.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Cipher\_raw_aesni.pyd
        • Size 15KB
        • SHA256 3818873f50418cbecde58150e9bffff7372d2c2067fc0b96ffac9482dfddd603
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _BLAKE2s.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Hash\_BLAKE2s.pyd
        • Size 13KB
        • SHA256 d1ed1ca3c6802954cd8ca6f5e419c54a357b4a04bb802bab876b04b942a4b862
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _SHA1.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Hash\_SHA1.pyd
        • Size 17KB
        • SHA256 8f80524247c830d9bb590d025e15ec34d7d337a16e5c4422e2da0448d06c88a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _SHA256.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Hash\_SHA256.pyd
        • Size 21KB
        • SHA256 2d57abc0274265d2ab891fba840c05a34831f61ab5c21d0540fc43bd28cc5ae3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _cpuid_c.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Util\_cpuid_c.pyd
        • Size 10KB
        • SHA256 2af984819d9b1f95132520901b355eb85aa24d5efc6fc5ae9e77252ed03b7f4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _strxor.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\Crypto\Util\_strxor.pyd
        • Size 10KB
        • SHA256 c77f18f1f7a377bc388de0104abf4868d6f0c2ef7ef2b97b34d875cfc3040aac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\VCRUNTIME140.dll
        • Size 121KB
        • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_asyncio.pyd
        • Size 52KB
        • SHA256 b65afa3561034213a4218e1e7103f5a59ec71d06bbebcaae2ed0a980e9a94988
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_bz2.pyd
        • Size 71KB
        • SHA256 c46b2979e25b66827d0361a559e12879b8a250cf5c8771a54db94e4808e00685
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _cffi_backend.cp311-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_cffi_backend.cp311-win_amd64.pyd
        • Size 175KB
        • SHA256 0b5c05bf3e9da14c33566d2c546fb7618ac7fc2b89365a66cfb1082ffe3d898d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_ctypes.pyd
        • Size 116KB
        • SHA256 c10b0b0f800c1327cb627a342b9afc5960d436e9e08b02f5d6971da69e4722c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_decimal.pyd
        • Size 237KB
        • SHA256 5566518542e3ee6dd8cbecbae76e40a30015e82cc04ee4ea768a3cc9fb53f4ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _elementtree.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_elementtree.pyd
        • Size 114KB
        • SHA256 b55c802837740b609c9c11bb37fb9c522b709ac8adab88d2c9931064473cf3cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_hashlib.pyd
        • Size 52KB
        • SHA256 5f17438d0e3091e6006048c873ce43e7e33d842a2a736500815a56aa8be4bf01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_lzma.pyd
        • Size 149KB
        • SHA256 0369454200d4b8deb3959415aae9bb9926e681b14bcb4427e432381fe57ecb27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_multiprocessing.pyd
        • Size 22KB
        • SHA256 8bd02152a04833cdde54a5a16754909fefee3d25d667156b725191375db16671
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _overlapped.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_overlapped.pyd
        • Size 38KB
        • SHA256 994444b54f09d9f348ff50d5b5ebcfb36cd5da8271e3f563b41bc6e23928a6dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_queue.pyd
        • Size 20KB
        • SHA256 2dc5de29aea58fd5ef02d47d8590658df2fdebe8e85fb8b05cda288c330d94da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_socket.pyd
        • Size 66KB
        • SHA256 9bc8b64506c21e94457da274573e85777a06b67d4d6b98dddeab4b97172fcef1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ssl.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_ssl.pyd
        • Size 163KB
        • SHA256 980f336c8b830e6e3aaa40ec8d442db61401dd88915b6c85ec278c351fe08eaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cp1252.enc

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH

        _tkinter.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\_tkinter.pyd
        • Size 52KB
        • SHA256 2cc987f71fe6a28e8ca5fc1f14c26bd6efa59b36e91d52901c17a5e57c4f0b2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\base_library.zip
        • Size 1.4MB
        • SHA256 df3f6017f3c87346e937d141a2640933a70a9d9eb3c7925e91b363e500fff57f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3-x64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\libcrypto-3-x64.dll
        • Size 7.6MB
        • SHA256 4ef4f59ddc79f232a76e7eee7a7fd91792974ba885011b00acada8debfc14173
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\libffi-8.dll
        • Size 27KB
        • SHA256 d56b5e5aa064e35f9ae5d11d2f0833a591d946bc04b85e1772ddfa7c84eb33a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3-x64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\libssl-3-x64.dll
        • Size 1.5MB
        • SHA256 64e9d8e1627fbd3e683be652116c6f285982d573f5b772e5647f229cb293d597
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\pyexpat.pyd
        • Size 198KB
        • SHA256 2078cbd699c181466f3bd50e57e509842613ebfa82de6317beab6210d13b0a65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\python3.DLL
        • Size 54KB
        • SHA256 8fda4948f6fc2bed1c7d1ece9596a3450c772775e48046c0bf701517d78ae9e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python311.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\python311.dll
        • Size 5.6MB
        • SHA256 06cb189016f6d5a593aba0e4c53ae972f2b7a257373c502e7da80f35f37dc1c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\select.pyd
        • Size 18KB
        • SHA256 ab91970ff8458849e59711e323dc49f09bafe7a650ddcf797fd7242343ebc49d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lorem ipsum.txt

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
        • Size 1KB
        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
        • MD5 SHA1 SHA512 TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\tcl86t.dll
        • Size 1.8MB
        • SHA256 59488f67a8e75a5d51c7cb865436b5581fbb16014e9233b34db0c22bea6d4765
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\tk86t.dll
        • Size 1.5MB
        • SHA256 e9a5815ad39619e22d581b7124bbaa4192e701229956a2edbaffc0c420864561
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000015482\unicodedata.pyd
        • Size 1.1MB
        • SHA256 aa489115a8139de6aa0db51e2c8771c78df430fd7c3c65b714f385833ccc91fe
        • MD5 SHA1 SHA512 SSDEEP TLSH