Overview

overview

7

Static

static

3

token_generator.exe

windows11-21h2-x64

7

token_generator.exe

windows11-ltsc_2024-x64

7

token_generator.pyc

windows11-21h2-x64

3

token_generator.pyc

windows11-ltsc_2024-x64

3

Resubmissions

07/11/2026, 22:21

261107-19x4havzaw7

07/11/2026, 22:19

261107-18ntfafx917

Analysis

  • max time kernel
    148s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 22:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    token_generator.exe
  • Size 9.1MB
  • Sample261107-18ntfafx91
  • SHA256 d1d57be003490b3720f9848bb4f41cdce381646f03aaf8f782b1b9ddfe2f40b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 36 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\token_generator.exe
    "C:\Users\Admin\AppData\Local\Temp\token_generator.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5648
    • C:\Users\Admin\AppData\Local\Temp\token_generator.exe
      "C:\Users\Admin\AppData\Local\Temp\token_generator.exe"
      2⤵
      • Loads dropped DLL
      PID:4140

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _Salsa20.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_Salsa20.pyd
        • Size 13KB
        • SHA256 8fea9565de056af39d2a212b7cf81aca0ddcfe06b441b330f11dcecb36d448c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_cbc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_raw_cbc.pyd
        • Size 11KB
        • SHA256 06250bb8a09f550fbe120fc07c2e1e207665b36d55adb96eb0d672324b4f9aaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_cfb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_raw_cfb.pyd
        • Size 12KB
        • SHA256 bd8499e654c8a4248231b0d25d816c691046abd2c8a8d0820518ce71b0c17102
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ctr.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_raw_ctr.pyd
        • Size 14KB
        • SHA256 2618350a50cf3f395849e33114ced822a9cf0d08ad7a70cf66eb3f6e5be3ceeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ecb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_raw_ecb.pyd
        • Size 10KB
        • SHA256 d4f37954f6358ab1fbafe664f56cab07fb5fba36a3f0cbdf7f20ea3382e297da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ofb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Cipher\_raw_ofb.pyd
        • Size 11KB
        • SHA256 1ce4a72dbe395ea6337fd5319a5d1a15a47ca3e38c8efa328ace8d10269ec653
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _BLAKE2s.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Hash\_BLAKE2s.pyd
        • Size 13KB
        • SHA256 76fcfac9d30e302cd58451f3dbe69442f4257787ffd20ad8a9a302a815cb589d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA1.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Hash\_SHA1.pyd
        • Size 17KB
        • SHA256 507428f97725ff10cb610e2455c6510ac3ca66e04c4b3177c1db5be2399fbcf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA256.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Hash\_SHA256.pyd
        • Size 21KB
        • SHA256 eb21ab9f8169c6734b563dad334ec12e992d1d15913092cc4617e6ec7e4833a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _scrypt.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Protocol\_scrypt.pyd
        • Size 12KB
        • SHA256 dbb85ef65a945f69930bc505207930484dd632bc01d840e66b965fb273c909be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cpuid_c.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Util\_cpuid_c.pyd
        • Size 10KB
        • SHA256 34f1e4bc99a192cba9b3b685ea967cf4e64a087598b66df76ba5aad85440d976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _strxor.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\Cryptodome\Util\_strxor.pyd
        • Size 10KB
        • SHA256 094aa71db8c2512a9c76cc34d7cf009348da262269912d1506f164902e0fb086
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\VCRUNTIME140.dll
        • Size 95KB
        • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_bz2.pyd
        • Size 81KB
        • SHA256 62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_ctypes.pyd
        • Size 120KB
        • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_elementtree.pyd
        • Size 125KB
        • SHA256 262d771de19a071c2d086717c29dc9a704b33f95f6aa06ec2092f3e8f54495ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_hashlib.pyd
        • Size 63KB
        • SHA256 caa4d2f8795e9a55e128409cc016e2cc5c694cb026d7058fc561e4dd131ed1c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_lzma.pyd
        • Size 154KB
        • SHA256 60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_queue.pyd
        • Size 30KB
        • SHA256 925f05255f4aae0997dc4ec94d900fd15950fd840685d5b8aa755427c7422b14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_socket.pyd
        • Size 77KB
        • SHA256 e6deb751039cd5424a139708475ce83f9c042d43e650765a716cb4a924b07e4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\_ssl.pyd
        • Size 156KB
        • SHA256 d2a7999e234e33828888ad455baa6ab101d90323579abc1095b8c42f0f723b6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\base_library.zip
        • Size 1.0MB
        • SHA256 df6fd7658fd98ac34509b6c56205e75041eaa55c54ddf4e1c386f30c9e639335
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\certifi\cacert.pem
        • Size 290KB
        • SHA256 c55b21f907f7f86d48add093552fb5651749ff5f860508ccbb423d6c1fbd80c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp310-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\charset_normalizer\md.cp310-win_amd64.pyd
        • Size 10KB
        • SHA256 7edf019905c36cf7d81cfe1b5f5eef1365ae118cbba4138396247c9acf93e813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp310-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\charset_normalizer\md__mypyc.cp310-win_amd64.pyd
        • Size 120KB
        • SHA256 09056d560486a2368a917b2d476a453af1b885c4d98e45ac80f8ba61c0dff824
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\libssl-1_1.dll
        • Size 688KB
        • SHA256 d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\pyexpat.pyd
        • Size 194KB
        • SHA256 4a2d59993bce76790c6d923af81bf404f8e2cb73552e320113663b14cf78748c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\python310.dll
        • Size 4.3MB
        • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\select.pyd
        • Size 29KB
        • SHA256 db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\ucrtbase.dll
        • Size 1.3MB
        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI56482\unicodedata.pyd
        • Size 1.1MB
        • SHA256 1fb2d66c056f69e8bbdd8c6c910e72697874dae680264f8fb4b4df19af98aa2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download