Overview

overview

7

Static

static

3

8a92f11ec2...68.exe

windows10-2004-x64

7

8a92f11ec2...68.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/10/2026, 04:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68.exe
  • Size 12.7MB
  • Sample261030-e3lk8swt8n
  • SHA256 8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 40 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68.exe
    "C:\Users\Admin\AppData\Local\Temp\8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3316
    • C:\Users\Admin\AppData\Local\Temp\8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68.exe
      C:\Users\Admin\AppData\Local\Temp\8a92f11ec252717ca31e194b93f5f0730ec153c19f1e1cf8dceae23c13552f68.exe
      2⤵
      • Loads dropped DLL
      PID:4336

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_bz2.pyd
        • Size 81KB
        • SHA256 190ade9f09be287fcc5328a6a497921f164c5c67e6d4fcdcb8b8fd6853b06fe2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_hashlib.pyd
        • Size 60KB
        • SHA256 23063b56aa067c3d4a79a873d4db113f6396f3e1fe0af4b12d95d240c4cf9969
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_lzma.pyd
        • Size 154KB
        • SHA256 5361824ddac7c84811b80834eca3acb5fe6d63bf506cf92baf5bd6c3786bf209
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_queue.pyd
        • Size 29KB
        • SHA256 24c23d04d274a4c1234f1a1a35b1805e1f17f99968f8baeec0c3b5295f05608a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_socket.pyd
        • Size 75KB
        • SHA256 71f014c3c56661ec93500db1d9f120e11725a8aedabc3a395658275710065178
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_ssl.pyd
        • Size 155KB
        • SHA256 4e496cb3b89550cf5883d0b52f5f4660524969c7a5fa35a3b233df4f482d0482
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\_tkinter.pyd
        • Size 63KB
        • SHA256 a6849cc7f7075924cbebe3000d6daa88d1724c1d869d6683a2bf9664cfb0e9ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ascii.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\ascii.pyd
        • Size 10KB
        • SHA256 1f5f478184100659ac1e4b180e5d015804526e063f4d4e1b3737c5a2a18fe00d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ascii__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\ascii__mypyc.pyd
        • Size 32KB
        • SHA256 70ab0f5daf3a2ed5c8f7171df1d700c2534c70a5de8e9c6d8904f23db831c061
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        confusion.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\confusion.pyd
        • Size 10KB
        • SHA256 940c6cb920e43afd157a81ea9b2096263805f0ab7e915d881adb4f3d0d4a5a14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        confusion__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\confusion__mypyc.pyd
        • Size 72KB
        • SHA256 57f6a61193a03cdd8d8af8ebfeb43b33f678eb57410673c538a406b92d794194
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        escape.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\escape.pyd
        • Size 10KB
        • SHA256 214e66af05816c5d11f2791051da1d25a40b9fe6be94a689be415682d9411d67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        escape__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\escape__mypyc.pyd
        • Size 53KB
        • SHA256 a7525d02d144951b027b80765081272af3064c884a203563ae407299ad0ba3db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        magic.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\magic.pyd
        • Size 10KB
        • SHA256 4e95af9cf9446f49802fd10e16e3b26e4d3de877b9e4502ea5a04a895bdd200a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        magic__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\magic__mypyc.pyd
        • Size 57KB
        • SHA256 ba30bc97e002674d91454f5a51c7742b9c0d1c9500063a716c6429a878ee5c6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orchestrator.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\orchestrator.pyd
        • Size 10KB
        • SHA256 5227e0a6b9bc555971f3f0c4d5014b9abfefbe62a6e82d9e0b9d34d48d0e7c3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orchestrator__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\orchestrator__mypyc.pyd
        • Size 107KB
        • SHA256 f7c07fb34f30149c9af30429fcb62e984c4754c6b9152526e117ef310c744e3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        statistical.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\statistical.pyd
        • Size 10KB
        • SHA256 1370fac6e0a05879123d0c3dd7bd1c89ad34e0aea4e9dd10c79c7b802a5829d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        statistical__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\statistical__mypyc.pyd
        • Size 42KB
        • SHA256 f10337124df615bda37abb48258214ad3d0a4dc8a3ecce8a71c75d360466ed35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        structural__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\structural__mypyc.pyd
        • Size 76KB
        • SHA256 0a45748cc7785b6663342263e8100263914dcbbf645c5349bf26660f4ad19fc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        utf1632__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\utf1632__mypyc.pyd
        • Size 56KB
        • SHA256 47420e0dc3e6074e2b3238ef09836b1aee95c501103257985119f1a159911f7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        utf8__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\utf8__mypyc.pyd
        • Size 36KB
        • SHA256 b2dea84c835e43de9bd11c22cfd04e4141c2639b91f137b80d895e90bfba83c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        validity__mypyc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\chardet\pipeline\validity__mypyc.pyd
        • Size 31KB
        • SHA256 0f2e1427c2ff8d86f9bbdad39e9e5cd29107916dcd5e276050be05ea9217e3c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\libssl-1_1.dll
        • Size 686KB
        • SHA256 2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        main.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\main.dll
        • Size 16.1MB
        • SHA256 842d6e849a8940199949e0fcf24dbc490fa0c1f47b0659783bd370f4fcef0986
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\python310.dll
        • Size 4.3MB
        • SHA256 c30589187be320bc8e65177aeb8dc1d39957f7b7dcda4c13524dd7f436fb0948
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\select.pyd
        • Size 28KB
        • SHA256 8b4b5d37b829ba885281134d9948f249e0ecd553ae72deda6a404619fdf4ccc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\tcl86t.dll
        • Size 1.8MB
        • SHA256 fbfd065f861ec0a90dd513bc209c56bbc23c54d2839964a0ec2df95848af7860
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\tk86t.dll
        • Size 1.5MB
        • SHA256 cd2f60075064dfc2e65c88b239a970cb4bd07cb3eec7cc26fb1bf978d4356b08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\unicodedata.pyd
        • Size 1.1MB
        • SHA256 a3aa957cf891a411a4e22e41aa4053265eccba4d47b5abe6475789ebba7fcca0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_3316_947261_0ziumzW_JXk\vcruntime140.dll
        • Size 96KB
        • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3316-1036-0x00007FF782990000-0x00007FF78367B000-memory.dmp
        Download

        memory/4336-1037-0x00007FF782990000-0x00007FF78367B000-memory.dmp
        Download

        memory/4336-1038-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1041-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1044-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1047-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1050-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1053-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1056-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1059-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1062-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1065-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1068-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1071-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1074-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download

        memory/4336-1077-0x00007FFDA6B20000-0x00007FFDA7B6D000-memory.dmp
        Download