Overview
overview
8Static
static
3Graillon-FREE-2.8.zip
windows10-2004-x64
1Graillon-FREE-2.8.zip
windows11-ltsc_2024-x64
1Graillon-F...de.pdf
windows10-2004-x64
3Graillon-F...de.pdf
windows11-ltsc_2024-x64
3Graillon-F...et.pdf
windows10-2004-x64
3Graillon-F...et.pdf
windows11-ltsc_2024-x64
3Graillon-F...on2.so
ubuntu-18.04-amd64
1Graillon-F...st.ttl
windows10-2004-x64
3Graillon-F...st.ttl
windows11-ltsc_2024-x64
3Graillon-F...n 2.so
ubuntu-18.04-amd64
1Graillon-F...n 2.so
ubuntu-18.04-amd64
1Graillon-F....0.pkg
macos-10.15-amd64
4Graillon-F....0.exe
windows10-2004-x64
4Graillon-F....0.exe
windows11-ltsc_2024-x64
6$PLUGINSDI...er.bmp
windows10-2004-x64
1$PLUGINSDI...er.bmp
windows11-ltsc_2024-x64
1$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
8$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3$PROGRAMFI...ry.tfx
windows10-2004-x64
3$PROGRAMFI...ry.tfx
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/06/2026, 03:04
Static task
static1
Behavioral task
behavioral1
Sample
Graillon-FREE-2.8.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Graillon-FREE-2.8.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Graillon-FREE-2.8/Graillon 2 User's Guide.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Graillon-FREE-2.8/Graillon 2 User's Guide.pdf
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Graillon-FREE-2.8/Graillon Datasheet.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Graillon-FREE-2.8/Graillon Datasheet.pdf
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/AuburnSoundsGraillon2.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/manifest.ttl
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/manifest.ttl
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
Graillon-FREE-2.8/Linux/Linux-64b-VST2-FREE/Auburn Sounds Graillon 2.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral11
Sample
Graillon-FREE-2.8/Linux/Linux-64b-VST3-FREE/Auburn Sounds Graillon 2.vst3/Contents/x86_64-linux/Auburn Sounds Graillon 2.so
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral12
Sample
Graillon-FREE-2.8/Mac/Graillon-2-FREE-2.8.0.pkg
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral13
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory.tfx
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
General
- Target $PLUGINSDIR/modern-header.bmp
- Size 25KB
- Sample260620-dkl9daes4w
- SHA256 d0fcf2b4f8d621190e00ee260abf219b6cb2247e99638df0b038c4af6b5b7f81
- MD5 98a96e7e7dab282d6de957595e4e5aa9
- SHA1 50cd2dcbdc9445ce58c3df67c8947decae33a7af
- SHA512 335b7ee84fb1fd055df3365f65a50f57378fe71bb99bc0594bcc9812513085b705bc7f7fff941fecd3ea066915101ef1ccc48a6186eb25e34c3a0113bc77320a
- SSDEEP 192:dOCN2Rmai8gP0O080egRt9uaWJ9sSriln25KVxxLvKBDiOCPDShjyDCVJlgzNcYL:oUNisiXxxLKBDiOEEA3Y6
- TLSH T198C29DED7D0DB9E87EA3566C2E1848C1B42AAEA400A776A1903DB757107E2D4DCF1DB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4616 mspaint.exe 4616 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4616 mspaint.exe 4616 mspaint.exe 4616 mspaint.exe 4616 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\modern-header.bmp"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4616
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:560