Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 14:41

General

  • Target
    ransomware_with_key.exe
  • Size 11.4MB
  • Sample261102-r2p89acz2p
  • SHA256 5da630faad80a8b85c146403de723fb9009fe8a1aef4fb149221376cfb902b52
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 9 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ransomware_with_key.exe
    "C:\Users\Admin\AppData\Local\Temp\ransomware_with_key.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2828
    • C:\Users\Admin\AppData\Local\Temp\ransomware_with_key.exe
      "C:\Users\Admin\AppData\Local\Temp\ransomware_with_key.exe"
      2⤵
      • Loads dropped DLL
      PID:4836

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\_bz2.pyd
        • Size 82KB
        • SHA256 160b5218c2035cccbaab9dc4ca26d099f433dcb86dbbd96425c933dc796090df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _cffi_backend.cp312-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\_cffi_backend.cp312-win_amd64.pyd
        • Size 177KB
        • SHA256 9af5e4f68a41f26b726f2e9424f9d58a4f5666189f6a48be95f406b257102aec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\_lzma.pyd
        • Size 154KB
        • SHA256 b095fa2eac97496b515031fbea5737988b18deee86a11f2784f5a551732ddc0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\base_library.zip
        • Size 1.3MB
        • SHA256 9b03104a6087e37a5d8a16a73edb0567ac00e29f31250f6706a44a132c458c90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _rust.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\cryptography\hazmat\bindings\_rust.pyd
        • Size 9.4MB
        • SHA256 1d4332a447cab13dec8e3a533ad579e0e562b79e40822c931f33769758fc7156
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\python3.DLL
        • Size 66KB
        • SHA256 d52baca085f88b40f30c855e6c55791e5375c80f60f94057061e77e33f4cad7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\python312.dll
        • Size 6.6MB
        • SHA256 93488fa7e631cc0a2bd808b9eee8617280ee9b6ff499ab424a1a1cbf24d77dc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28282\ucrtbase.dll
        • Size 1.3MB
        • SHA256 d404dc9aa843d53d7e276dd078b2cac8d7aa905e2838a1fe8385278e19ba3810
        • MD5 SHA1 SHA512 SSDEEP TLSH