Overview

overview

7

Static

static

3

MacroScribeV1.0.exe

windows10-2004-x64

7

MacroScribeV1.0.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/11/2026, 16:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    MacroScribeV1.0.exe
  • Size 8.6MB
  • Sample261110-vem26agh72
  • SHA256 01fba88962fd3914598ac8bcd898fc8a600f20119a15c431b308f24cca4c73ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MacroScribeV1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\MacroScribeV1.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5092
    • C:\Users\Admin\AppData\Local\Temp\MacroScribeV1.0.exe
      "C:\Users\Admin\AppData\Local\Temp\MacroScribeV1.0.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:4216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\VCRUNTIME140.dll
        • Size 99KB
        • SHA256 ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_bz2.pyd
        • Size 84KB
        • SHA256 0563df6e938b836f817c49e0cf9828cc251b2092a84273152ea5a7c537c03beb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_ctypes.pyd
        • Size 123KB
        • SHA256 2995ef03e784c68649fa7898979cbb2c1737f691348fae15f325d9fc524df8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_hashlib.pyd
        • Size 45KB
        • SHA256 f9548e3b71764ac99efb988e4daac249e300eb629c58d2a341b753299180c679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_lzma.pyd
        • Size 158KB
        • SHA256 5ddba137db772b61d4765c45b6156b2ee33a1771ddd52dd55b0ef592535785cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_queue.pyd
        • Size 27KB
        • SHA256 dd8c39ff48de02f3f74256a61bf3d9d7e411c051dd4205ca51446b909458f0cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_socket.pyd
        • Size 77KB
        • SHA256 1db7b4f6ae31c4d35ef874eb328f735c96a2457677a3119e9544ee2a79bc1016
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\_tkinter.pyd
        • Size 62KB
        • SHA256 c7a385b97218dfafe81b5ecd249a5f7031c258a4f36a5c9eff7cf1e6203d148e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-console-l1-1-0.dll
        • Size 15KB
        • SHA256 db1f9059a50660729319f0ceab6958373e0703039dfd9541aa384c29bcb19d68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-datetime-l1-1-0.dll
        • Size 14KB
        • SHA256 b65e3d830bfa022b46246aea6f9d59ba4930ae9f62f81b14c7fb1352d39356d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-debug-l1-1-0.dll
        • Size 14KB
        • SHA256 093358c90b4cd78e6ead672cd524d695cd6faa7123c3ee8a9f3e0b074e2cfb58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 14KB
        • SHA256 b193c18e9bf13d5e6c3361195d8766592cdff49a7931921696ff5baf1b0f0a33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-file-l1-1-0.dll
        • Size 18KB
        • SHA256 8df15ba92406e4b093c2b58a34ccd2adaecca8eb4ff11040c7f7a4ba0b5c85e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-file-l1-2-0.dll
        • Size 14KB
        • SHA256 69c6984052882e0b9ec81fed9370b95173bd9190a329566541eba397c7f0e4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-file-l2-1-0.dll
        • Size 14KB
        • SHA256 813e5406652a41b05ffd1b9be153a56cab5752d9afcdac9455827ecdfd24cdeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-handle-l1-1-0.dll
        • Size 14KB
        • SHA256 58f15e6d21fb4761a467ad0540994e3242aa70a2717bf942001724cb1d3775d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 47f329bc49d517d5ca015b52f328d87e8dddceca2c354457aa9dd38a4c631f28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 14KB
        • SHA256 98ce6dadd373178f8731970ebf2bda3635f688383b0f0dd6808e80c77b8ca574
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 15KB
        • SHA256 2c0d39bb187aeff88be1169e246330f2942b4847070e7078276306c930954419
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-localization-l1-2-0.dll
        • Size 17KB
        • SHA256 d401bd2bc4008280f2bd1235ed5aa46d87c402f4db0452a0fb5e7db682eb2fd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-memory-l1-1-0.dll
        • Size 15KB
        • SHA256 c68eada33314280ebedfab1a78f90f4eb69cdfb2f376a4aab98debb864bba072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 14KB
        • SHA256 8b2060618e2728928ec088c283af07a26f333671f6a62982c1209330146176db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 15KB
        • SHA256 dded1bbbdd3bfe22059b899fda615c123077df2487cf2395ae990a3fcaabd1e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 16KB
        • SHA256 fb3414598e2f09bff6d939cd4e29954fa897c35a17073dfac0f60f9adeff2b2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 15KB
        • SHA256 d52e683f6f514107ccbfa6f838116835d8df7aac19994e18c9d6f77e3c6b245b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-profile-l1-1-0.dll
        • Size 14KB
        • SHA256 1502001d09d60d805bab7d40d6ffe386a99fdd8fa9feb8bbc1b11dfa8556b672
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 15KB
        • SHA256 154a67b3aa0665263f6f118563458d82d7ea5078a56939a1010cab3ed5190e0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-string-l1-1-0.dll
        • Size 14KB
        • SHA256 8128024e00a315a4025f1d44e7343d81a14334f847a87bd45851f78ad3ff8d28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-synch-l1-1-0.dll
        • Size 16KB
        • SHA256 0d88d1e7bb7feb16de7fdd708d4f54e80b547dc3601eb82469c4fb0ca97820fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-synch-l1-2-0.dll
        • Size 15KB
        • SHA256 83a6700439889c43eeda4160c02da8ee231eabfa4efe976d2a3dde51a72c930d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 15KB
        • SHA256 67b29a15235d1e1c622eb1411e99b7ed5d4e901051bf460ec942b88493a08fc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-timezone-l1-1-0.dll
        • Size 14KB
        • SHA256 de9c797770708218377548cbba7d0bbc65b51b15e1e66bb92497d21a6596afa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-core-util-l1-1-0.dll
        • Size 14KB
        • SHA256 7bc359caa7eab524db32e6f16e1e18ef03b44104b0e23ba5f3b1d9a1d606ed17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-conio-l1-1-0.dll
        • Size 15KB
        • SHA256 4aa0277752213e06d9743e0d6d6157a1feeeeaa46f53f71616881c0779d241a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-convert-l1-1-0.dll
        • Size 18KB
        • SHA256 6107206085bfa4c37e35e01d49263f6b7d984c100388b5aaeeb1e67f28e8cbda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-environment-l1-1-0.dll
        • Size 15KB
        • SHA256 293415dfbe58a5422029e1782fb6e0d5bb5be1432c70315f2b5a228b6e244ac4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 16KB
        • SHA256 4e8b437475efe206342c552e283d42dd2b288da2d29a61313abf899be4a546e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 d47a60f35a94326d11036ccd2e0ebbf472653dd7a85ed0b940d6e7f464377492
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-locale-l1-1-0.dll
        • Size 15KB
        • SHA256 9eee583cc1a59f868de01d57e2d45e67640dc4815f0de14db1fb29af81e4f039
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 2f55d8e23af4de0a700b0fc4ed6685cbd611ab6bd7da26a2616893f42df0f77e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-process-l1-1-0.dll
        • Size 15KB
        • SHA256 fb0f0c5301141496b1e8d60eeb1cc98a5be7ef108a36df508000bffca74417b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 19KB
        • SHA256 5ba6cd6f3eba55a31d465e8f5b0a793c2f3c376a80de2e702ea12b36fe228e56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 20KB
        • SHA256 90cfa80826b50fa80cb7184538eae9144f542b4ee8100ee7d32b06cf283d1608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-string-l1-1-0.dll
        • Size 20KB
        • SHA256 a78f7d4bc31bd6adae526a6fb4709da68debb0d3f70a4d3ce4bc1bb62565f9ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-time-l1-1-0.dll
        • Size 17KB
        • SHA256 c28f61764cda720e33de0af68b458d08671d73bdfadcceaf7885a6f48ccc6b71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\api-ms-win-crt-utility-l1-1-0.dll
        • Size 15KB
        • SHA256 a06e69ebb2f47a876ab31a26a52736519dde1ab8a0457fb46991a2246fa5ac50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\base_library.zip
        • Size 823KB
        • SHA256 a169d302e7647b9c87133a22b9a492266ed6a53598c16cb70ab4914cd6e11270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 594303e2ce6a4a02439054c84592791bf4ab0b7c12e9bbdb4b040e27251521f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\python38.dll
        • Size 4.0MB
        • SHA256 13f7c38dc27777a507d4b7f0bd95d9b359925f6f5bf8d0465fe91e0976b610c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\select.pyd
        • Size 26KB
        • SHA256 940fb90fd78b5be4d72279dcf9c24a8b1fcf73999f39909980b12565a7921281
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\tcl86t.dll
        • Size 1.6MB
        • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\tk86t.dll
        • Size 1.4MB
        • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\ucrtbase.dll
        • Size 964KB
        • SHA256 854ae963089cc26f48ddab94d68ae2049777afa5557fb89f3bee52e19b441497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50922\unicodedata.pyd
        • Size 1.0MB
        • SHA256 5578c3054f8846be86e686fb73b62b1f931d3ed1a7859b87925a96774371dba4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download