Overview

overview

7

Static

static

3

Ceilidh-0....64.exe

windows10-2004-x64

7

Ceilidh-0....64.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 15:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Ceilidh-0.1.0-windows-x64.exe
  • Size 16.3MB
  • Sample261102-tabynaxv4k
  • SHA256 c2efda23077882de74ad19abbde1041a28183b46c7bda0c4a7cd768c2d37378b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 41 IoCs
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ceilidh-0.1.0-windows-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\Ceilidh-0.1.0-windows-x64.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5136
    • C:\Users\Admin\AppData\Local\Temp\Ceilidh-0.1.0-windows-x64.exe
      "C:\Users\Admin\AppData\Local\Temp\Ceilidh-0.1.0-windows-x64.exe"
      2⤵
      • Loads dropped DLL
      • Checks SCSI registry key(s)
      • Suspicious use of SetWindowsHookEx
      PID:5612

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\_bz2.pyd
        • Size 84KB
        • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\_lzma.pyd
        • Size 157KB
        • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\_wmi.pyd
        • Size 39KB
        • SHA256 a980f1e7a29842bd946863fc2693fbeb555a9dc0f9e1630dfed9a2fcdef3ece2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\base_library.zip
        • Size 1.3MB
        • SHA256 d224f1cc5501988a91444e7723376d5d11032a20ccf1a34db0609216bdd58fea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDL2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\SDL2.dll
        • Size 1.5MB
        • SHA256 b37740a72a7a9706216df9f0134894bb7a850b356fd149398c67d874cbcfacb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDL2_image.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\SDL2_image.dll
        • Size 154KB
        • SHA256 71607e840f462799652023d394fad7aed1f348a3cd52f88a8b3b7842fa7a3147
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\base.cp312-win_amd64.pyd
        • Size 30KB
        • SHA256 4b6601c4b8e4d4aebef4c0b27f85b09736c5b156c7590f375ad571df871eb731
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bufferproxy.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\bufferproxy.cp312-win_amd64.pyd
        • Size 17KB
        • SHA256 ff05c878d90cbedfc891055e5ef600e951ba10b8cf09f70d377089ba22a98187
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        color.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\color.cp312-win_amd64.pyd
        • Size 40KB
        • SHA256 bf602f11d1611c7e30bca371bbc1e94b2f9942665efd90a8a8f1cdcd34526f70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        constants.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\constants.cp312-win_amd64.pyd
        • Size 50KB
        • SHA256 9a566fa3fe50dab246cf3716adbc16cf34461dcd391e64329d22f2f571335ac4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        display.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\display.cp312-win_amd64.pyd
        • Size 48KB
        • SHA256 fbbb4bada57e2e2aecb3e71cb89f5b154c6963bce3cbc96e0c7a6709029f9551
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        draw.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\draw.cp312-win_amd64.pyd
        • Size 66KB
        • SHA256 3127223eacaa919a689ff353f9288e8fc1cc1d86018cd54bd1cee81ace75df48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        event.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\event.cp312-win_amd64.pyd
        • Size 42KB
        • SHA256 1833338206396e71c704b4ba7576c4b3161df94c8877361baad35705b25a4c7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        image.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\image.cp312-win_amd64.pyd
        • Size 32KB
        • SHA256 d633bf4ec1162480e460625bfc8167ebf7ad1e8cb5688e8e6ac66af6de1e1381
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        imageext.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\imageext.cp312-win_amd64.pyd
        • Size 15KB
        • SHA256 f0b979faccb66bfb0e7c4a9d896b8b44705f91a86fe0be840bf6e0541216c150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        joystick.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\joystick.cp312-win_amd64.pyd
        • Size 20KB
        • SHA256 40f0314ca6cb4fa0f73cbeca62bf1aad7a3471accb9a344c5ee414f27d6bb1b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        key.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\key.cp312-win_amd64.pyd
        • Size 20KB
        • SHA256 e3cfbbc0ad43e24b4369f963a88fcab332e5b9cb4af474d493d1b5d2317cec32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mask.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\mask.cp312-win_amd64.pyd
        • Size 57KB
        • SHA256 293fba90c4e20a39d4509af21162bb62975c4b5717802975b1053776fedbca56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        math.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\math.cp312-win_amd64.pyd
        • Size 73KB
        • SHA256 ecea1ca09aaed95670de8370ab47d055a705134518052754a56a0b910b1f3c3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mouse.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\mouse.cp312-win_amd64.pyd
        • Size 20KB
        • SHA256 67d9f347609ac492e61ea0161b508d1d3c91f095a577da7c9732546ca19f722d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pixelarray.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\pixelarray.cp312-win_amd64.pyd
        • Size 49KB
        • SHA256 844b1d7df33343ebd78ae229b6fddc76892dbd895ac6e6e5448609e307a509e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pixelcopy.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\pixelcopy.cp312-win_amd64.pyd
        • Size 25KB
        • SHA256 502cbd04b0d1909b4a886795a9b5b2d05f06137e0626a1d039907b40e19d3ef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rect.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\rect.cp312-win_amd64.pyd
        • Size 70KB
        • SHA256 c5ec901b775c780b03216731dd9bbbf5b9b6009bf25f6af7c6ca4c8dcab0cc78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rwobject.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\rwobject.cp312-win_amd64.pyd
        • Size 18KB
        • SHA256 d1752d996308e57cca853a05b8bb2b375ef01fbfb5b32f770f62efe3ebd30fd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        surface.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\surface.cp312-win_amd64.pyd
        • Size 237KB
        • SHA256 6928fe0df7a820c0888a04c569a99ba17dfaf03e97b392054d3f975442b8ca4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        surflock.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\surflock.cp312-win_amd64.pyd
        • Size 11KB
        • SHA256 9e3b4f4eaf5a271b0946dcd37a34db683be3d2fb535cbb40fd97a43257ec2693
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        time.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\time.cp312-win_amd64.pyd
        • Size 18KB
        • SHA256 c2552da5bee681b2814669a3bc5f4a11231f971c0650a8cae2b6e9b4b57dc8b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        transform.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\transform.cp312-win_amd64.pyd
        • Size 79KB
        • SHA256 fb234cb83421164f7b31cb0b1d169606f522ae536262e9e5a76d333320efe59c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        window.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\pygame\window.cp312-win_amd64.pyd
        • Size 30KB
        • SHA256 0a311a9085cdb1f1d309fc876cc809038fc4776dabbe08b59641c5245679b13b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\python312.dll
        • Size 6.6MB
        • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000014102\ucrtbase.dll
        • Size 1.3MB
        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5612-180-0x0000000065EC0000-0x0000000065F04000-memory.dmp
        Download

        memory/5612-181-0x0000000065EC0000-0x0000000065F04000-memory.dmp
        Download