Overview

overview

7

Static

static

3

timer.exe

windows10-2004-x64

7

timer.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 02:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    timer.exe
  • Size 10.8MB
  • Sample261102-dav4jaev4x
  • SHA256 3882434cf01eaf4611c0f77156f9762a4a7b46ae9415653b82bc54ac5567e7c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\timer.exe
    "C:\Users\Admin\AppData\Local\Temp\timer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2144
    • C:\Users\Admin\AppData\Local\Temp\timer.exe
      "C:\Users\Admin\AppData\Local\Temp\timer.exe"
      2⤵
      • Loads dropped DLL
      PID:1356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_bz2.pyd
        • Size 83KB
        • SHA256 f81dc49eac5ecc528e628175add2ff6bda695a93ea76671d7187155aa6326abb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_decimal.pyd
        • Size 245KB
        • SHA256 e4104e47399d3f635a14d649f61250e9fd37f7e65c81ffe11f099923f8532577
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_hashlib.pyd
        • Size 64KB
        • SHA256 79c4cde23397b9a35b54a3c2298b3c7a844454f4387cb0693f15e4facd227dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_lzma.pyd
        • Size 156KB
        • SHA256 a6e2a5bb7a33ad9054f178786a031a46ea560faeef1fb96259331500aae9154c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_socket.pyd
        • Size 81KB
        • SHA256 7daff6aa3851a913ed97995702a5dfb8a27cb7cf00fb496597be777228d7564a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\_tkinter.pyd
        • Size 62KB
        • SHA256 70439ee9a05583d1c4575dce3343b2a1884700d9e0264c3ada9701829483a076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-console-l1-1-0.dll
        • Size 19KB
        • SHA256 a6988c2d3f48b4dd93ff2dcc1794382f486aa70cea0fd5df27a7cfcf3e4c65e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-datetime-l1-1-0.dll
        • Size 19KB
        • SHA256 321301436dcd638315e42571b563666055f9da090f33c4239ac11ce1db4219c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-debug-l1-1-0.dll
        • Size 19KB
        • SHA256 c12b1d40b067dbbf3256e813cbd7fcde6ec168656fd2d9a8bb40b1cbec9c27e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 19KB
        • SHA256 610baf09cfeced19e4293336308259ef301a80660465a890f6857b73cad6363a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-fibers-l1-1-0.dll
        • Size 19KB
        • SHA256 2dca9a26965b9ef6274400ed3e84ef29acdf41a14f0d9a6b3e8348eda0251bad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-file-l1-1-0.dll
        • Size 23KB
        • SHA256 7bacdabc1f1218e5a8994574567dee11e3d863391f820e64132727802f064e94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-file-l1-2-0.dll
        • Size 19KB
        • SHA256 08c4431d2e029d91db307a53943d381e4823bb53e4014c388c3d88ded9d2e233
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-file-l2-1-0.dll
        • Size 19KB
        • SHA256 f889a4e805b2b052755f188d8942a79f3eb1867ebe077064ff8707d873c33347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-handle-l1-1-0.dll
        • Size 19KB
        • SHA256 e22178b39098fab5c1bafe49a03ac8821e22ec2a687b434fb394b294c5379070
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 2d81a2e0bf5a6bc256a82e152b408261bd6903aeeabfcdb980634a8c511e23dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 19KB
        • SHA256 c88dcc1629006d9791514231cc9bdce5b749bf985e5299cea3f51f5879a1b893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 19KB
        • SHA256 37a821a5e53841bd86896737527e7e2869f7dcb2edafe5d1c9cffb45e1899f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-localization-l1-2-0.dll
        • Size 19KB
        • SHA256 761d51cf2f2aac43421eecc637dc43ba092516f2b342f6d017007dc607576365
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-memory-l1-1-0.dll
        • Size 19KB
        • SHA256 2ebed908fc26516c1e24d721f0612d99080bfb3d46a884970595ba93343854d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 19KB
        • SHA256 1e868ab4a90eeee9efe9e9801ab4bcc7553f0fe9f1dd95b83afc3648f4413e38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 19KB
        • SHA256 d8051dc4df7fef20a08c1fcbb91590c48a49ed87db346d772bff605d47476ccb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 19KB
        • SHA256 dbe4ef3d5b222734a1e928275a157023e0d067a426ffb5e7f51957536b2b58c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 19KB
        • SHA256 b1195855a4b9125ed3482ebd45316d6105325d1ec9e3b1ce9fa084b52a00bdd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-profile-l1-1-0.dll
        • Size 19KB
        • SHA256 a8f1559ae80efe93ac045fecf29a0e96f8874f42e2b1deeea2c2b9e73aa55657
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 19KB
        • SHA256 fb97fafe954294f79bb48b9046048db499ceebb27261611e6c89a0c6cbecb94b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-string-l1-1-0.dll
        • Size 19KB
        • SHA256 a7d644822b18fc6f8f625c33ca23418ba3264e43b89f7faf0503931cd283f1c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-synch-l1-1-0.dll
        • Size 19KB
        • SHA256 62d45523f434af3c28d37fe1a077f2b30785728e62c264c830262c43a5eba4ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 a87b4b67c7a1ba6e62c87e094c6e9560fd8d8fbb7b49a6fb773dbb7024b422e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 19KB
        • SHA256 566e8f29aca9d964a56ae6505d9d7cb96d3a060f330b9c11c09e0836d050ba45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-timezone-l1-1-0.dll
        • Size 19KB
        • SHA256 a9e03df5efce9b78f958f89613b8f55e59597f6430e1f40ceb9c4130d68d183c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-core-util-l1-1-0.dll
        • Size 19KB
        • SHA256 cbb7adcd9329b31aba1a1d7c32558c1169e6ffcc02511c933821b0e91a2512b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 908734cec8deef44ca30396161b01f401fdebb49aae19e3b830ec9cbb22a416c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-convert-l1-1-0.dll
        • Size 23KB
        • SHA256 a6d4391fa7f6f85d4064cce7a77305fdb7d5a9a51ea6fb28d97dabfe2532995f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-environment-l1-1-0.dll
        • Size 19KB
        • SHA256 cda04289db3084c48d6ec267ea73a35c4b07352afcec84b5dad4b05f78da9d84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 19KB
        • SHA256 4ef654a52267db859153eadd7dc8ded94acf74d4e730bf1ab624e98d51f01648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 5ef60f3832d14b057441f7c6ece2b48de41ed52b8ae14f4032bf59ef7ebbb066
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 a1d33193fa0a775cad2290929f552369b8211af18390f5ccd97076076c1947ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 33841de83d5f43a6c51917753055f2ad5ef0862f08bec9005b68e6fbe669a4a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 30c48d36abc84304fae43dc4bd6fcbaf817be6d80b23082f5296710619cc3974
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 23KB
        • SHA256 9f5fc20fea2ebdb036d8a77e4c7845a4e70c97c5c78876d63c52407719012ceb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 23KB
        • SHA256 51889bae7d1a3ba167678f0c0a2346e4cc8897691b81081af13d6f6eac1d6462
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-string-l1-1-0.dll
        • Size 23KB
        • SHA256 9651fe8789c5c94155f504d67f6729c4dad723a32e367e60d06b694d7eabc7b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-time-l1-1-0.dll
        • Size 19KB
        • SHA256 49bef3d4862dd4664f32e81a60f516080db0dffc86bb78f7c12a7dcef9403f38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 d1a47555701e50cea3ee5cda5de97fb0df9a774c31dd6729e83c55beb1fd2a56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\base_library.zip
        • Size 1.3MB
        • SHA256 c1e0efdb3f4ac547e225d11c46e6fdabf600f51319cfdb163aa87e3caad9bfc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\python312.dll
        • Size 6.6MB
        • SHA256 c98ba3354a7d1f69bdca42560feec933ccba93afcc707391049a065e1079cddb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\select.pyd
        • Size 29KB
        • SHA256 680df34fb908c49410ac5f68a8c05d92858acd111e62d1194d15bdce520bd6c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\tcl86t.dll
        • Size 1.7MB
        • SHA256 c2966941f116fab99f48ab9617196b43a5ee2fd94a8c70761bda56cb334daa03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\tk86t.dll
        • Size 1.5MB
        • SHA256 c6ffe2238134478d8cb1c695d57e794516f3790e211ff519f551e335230de7de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\ucrtbase.dll
        • Size 1.1MB
        • SHA256 dff01a7bfad83d7f8456fef597e845b2d099291c8bf22b27584486d948d971f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\unicodedata.pyd
        • Size 1.1MB
        • SHA256 10ffd5207eeff5a836b330b237d766365d746c30e01abf0fd01f78548d1f1b04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI21442\zlib1.dll
        • Size 143KB
        • SHA256 837efb838cb91428c8c0dfb65d5af1e69823ff1594780eb8c8e9d78f7c4b2fc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1356-1046-0x00007FFA8EB50000-0x00007FFA8EB7A000-memory.dmp
        Download