Overview

overview

7

Static

static

3

FileCrypter.exe

windows10-2004-x64

7

FileCrypter.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 23:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FileCrypter.exe
  • Size 7.7MB
  • Sample261102-3vckcsxwex
  • SHA256 290ef65683fcafb51a48bab6ca7748e3d518ccc8ecbdd215e6585013c1c1b08a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 28 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FileCrypter.exe
    "C:\Users\Admin\AppData\Local\Temp\FileCrypter.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5732
    • C:\Users\Admin\AppData\Local\Temp\FileCrypter.exe
      "C:\Users\Admin\AppData\Local\Temp\FileCrypter.exe"
      2⤵
      • Loads dropped DLL
      PID:3396

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _Salsa20.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_Salsa20.pyd
        • Size 13KB
        • SHA256 e63d4123d894b61e0242d53813307fa1ff3b7b60818827520f7ff20cabcd8904
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_aes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_aes.pyd
        • Size 35KB
        • SHA256 c438dd66fa669430cce11b2acb7dc0ee72b7953b07013fda6bf6b803c2c961f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_aesni.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_aesni.pyd
        • Size 15KB
        • SHA256 90ed3206ca3d7248b5152b500a9d48bd55e1d178aed26214ce351090342260d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_cbc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_cbc.pyd
        • Size 12KB
        • SHA256 73cf4155df136db24c2240e8db0c76bedcbb721e910558512d6008adaf7eed50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_cfb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_cfb.pyd
        • Size 13KB
        • SHA256 bb79a502eca26d3418b49a47050fb4015fdb24bee97ce56cdd070d0fceb96ccd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ctr.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_ctr.pyd
        • Size 14KB
        • SHA256 4452cf380a07919b87f39bc60768bcc4187b6910b24869dbd066f2149e04de47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ecb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_ecb.pyd
        • Size 10KB
        • SHA256 614b4f9a02d0191c3994205ac2c58571c0af9b71853be47fcf3cb3f9bc1d7f54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ocb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_ocb.pyd
        • Size 17KB
        • SHA256 87b882b6af0036523aa919cb6d34f7192a5f590756d73a27d057791bf9d784d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ofb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Cipher\_raw_ofb.pyd
        • Size 12KB
        • SHA256 a2afe994f8f2e847951e40485299e88718235fbefb17fccca7ace54cc6444c46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _BLAKE2s.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_BLAKE2s.pyd
        • Size 14KB
        • SHA256 7fe364add28266c8211457896d2517fdb0ee9efc8cb65e716847965b3e9d789f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _MD5.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_MD5.pyd
        • Size 15KB
        • SHA256 77ee1e140414615113eabb5fc43dbba69daee5951b7e27e387ca295b0c5f651d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA1.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_SHA1.pyd
        • Size 17KB
        • SHA256 e88a0347f9969991756815dff0af940f00e966bc7875aa4763a2c80516f7e4ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA256.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_SHA256.pyd
        • Size 21KB
        • SHA256 1031ea4c1fd2f673089052986629b6f554e5b34582b2f38e134fd64876d9ce0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ghash_clmul.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_ghash_clmul.pyd
        • Size 12KB
        • SHA256 6be340aff563bee5f905c66734306729e8a241f356b4b053049aae71a7326607
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ghash_portable.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Hash\_ghash_portable.pyd
        • Size 13KB
        • SHA256 a66196465c839ec6eb287615942d40f0088dfeb67ee88ddbce3ed955829ae865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _scrypt.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Protocol\_scrypt.pyd
        • Size 12KB
        • SHA256 bb2be221531d66ec5e6ef026f5548749430a785fd1fa1c1becb12375c0ca6d1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cpuid_c.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Util\_cpuid_c.pyd
        • Size 10KB
        • SHA256 d830d77669527129bf3d10929aad1cc9ee5e44a9594e3fc651d3b5bc01c42c44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _strxor.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\Crypto\Util\_strxor.pyd
        • Size 10KB
        • SHA256 bf3a209eda07338762b8b58c74965e75f1f0c03d3f389b0103cc2bf13acfe69a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\_bz2.pyd
        • Size 75KB
        • SHA256 ed8b69049613e458a920ebb2ffe11a65bec83a4954fce8fd77269e65261ef2ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\_ctypes.pyd
        • Size 114KB
        • SHA256 34f8e60cac78868e649e3c3168f4ce2defa1c065bb9ee00885e0e79261fd11a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\_hashlib.pyd
        • Size 54KB
        • SHA256 56e01f8625a08ce0b67593fb1aabe833ffc01eaffaa6f839a243098fc46a9c4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\_lzma.pyd
        • Size 151KB
        • SHA256 7bbaddcbd27b118fe9c3a3048c6ff15dfda8fa8d0c28dc2019224b80cf578c71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _uuid.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\_uuid.pyd
        • Size 15KB
        • SHA256 5dce43733f92f47d1f1823c9e78037fe7047f1c3ca6f88269e45a2d7ed781fdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\base_library.zip
        • Size 1012KB
        • SHA256 d410d477b9c8bb6422a2b6aef1dcad9e15c7aafa9ccd667c07f4328663fc4adb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\libcrypto-1_1-x64.dll
        • Size 3.3MB
        • SHA256 3d310c70f5a1efe48370f8df10bcaaccabca6268d58bb41beee996dcc0206479
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python39.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\python39.dll
        • Size 4.2MB
        • SHA256 bfe299c68dfbd41476e519c5d912ce7a9f86ec74104266418f1fbcec2697ae6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI57322\ucrtbase.dll
        • Size 1.1MB
        • SHA256 fbed69a52fdcf571dd37fe4cc63cb86ed3732b5b998807f14968788027c00754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download