Overview

overview

7

Static

static

3

0f6fd9e461...e4.exe

windows10-2004-x64

7

0f6fd9e461...e4.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 03:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4.exe
  • Size 14.5MB
  • Sample261102-d26pcagz2r
  • SHA256 0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4.exe
    "C:\Users\Admin\AppData\Local\Temp\0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1340
    • C:\Users\Admin\AppData\Local\Temp\0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4.exe
      "C:\Users\Admin\AppData\Local\Temp\0f6fd9e461bddb42354141ccca81c64fb14e07d119297010d2c9aab954a3a8e4.exe"
      2⤵
      • Loads dropped DLL
      PID:2472

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LIBBZ2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\LIBBZ2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\VCRUNTIME140.dll
        • Size 121KB
        • SHA256 0205071c36c17f1efbd70178c852cb7d49985c484202752b8704b7ac6b184e60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\_bz2.pyd
        • Size 35KB
        • SHA256 ce316d62c4bb44e063bdc0f72ed710e39e5436d71b1e09e72fd0e5165c5ff8d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\_ctypes.pyd
        • Size 130KB
        • SHA256 bb4ab3ebfcd442ab75425a3deb0f4ca5ee4305858f862848f3ddfaa41691f8c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\_hashlib.pyd
        • Size 61KB
        • SHA256 8ba3c84887a20aa37fc6abb3827c2e263b5c624bf48d66e7911a55ba0a23a6c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\_lzma.pyd
        • Size 47KB
        • SHA256 a4b308d6b2af4cc2d3102fc9f29725a0d34773a24a1824fe08c7843f4274b574
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\base_library.zip
        • Size 1.1MB
        • SHA256 f62fbe891f0d29c15d068414f6818eb23b2b4121cf7c5eaccc003057bddb5279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffi.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\ffi.dll
        • Size 39KB
        • SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\libcrypto-3-x64.dll
        • Size 4.9MB
        • SHA256 0be7c1898ca40070ba6807cdc95722a35cbee79fa08399abd714b90a5b5239d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblzma.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\liblzma.dll
        • Size 193KB
        • SHA256 b8cf9fe6d3eaaff6fcebce37947660297762f2f4dde503f7f56ce6475c439abd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\python312.dll
        • Size 7.1MB
        • SHA256 d5c15f80afcd0679cfe6c82e80fcd30469bc7a54a6d466e161a10a9a57e7e479
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\ucrtbase.dll
        • Size 1.1MB
        • SHA256 fbed69a52fdcf571dd37fe4cc63cb86ed3732b5b998807f14968788027c00754
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13402\zlib.dll
        • Size 97KB
        • SHA256 8dbfd6ef7374a831158bddccb79e3d5665e9625c81af557f15b4150b7877f687
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2472-80-0x00007FFF8B670000-0x00007FFF8BB5E000-memory.dmp
        Download