Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/06/2026, 03:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
- Size 9.4MB
- Sample260620-dmv93aes4x
- SHA256 b17c4d698a7ff93edbe0512bbf180c896e3ff96c6be8495d3b08dfa1d5c1cf8d
- MD5 b15e6247e307fe3438f17aa05688ae5e
- SHA1 f68fe99bf6e6ed87b8d192406f01a3669e440cd2
- SHA512 cdfe99a47ada756f5898dc91dda695926293b4ac5207d585d30d7572b17246443a9ddeba1f9d440e6e800cef535d8b9f6a4be21301f67c6f55cb0795ddf9032c
- SSDEEP 196608:1tJV+nIDBO8XnlxYmRtxtGnScMHRAErNWw+xOE1h5hOUOkqkDioCnck10:1taIDBO8XlxYmttdcMHRzOxDOUO1CXCI
- TLSH T17AA63312AC90E515C8750379A87025B4562EA8769FAE163FE3231F5C98B370FB22B5DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 37 IoCs
description ioc Process File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct A minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct A# minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct F# minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Only in Full version.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\VST3\Auburn Sounds Graillon 2-64.vst3 Graillon-2-FREE-2.8.0.exe File created C:\Program Files (x86)\VSTPlugins\Auburn Sounds Graillon 2.dll Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct A major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct A# major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct C# major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct D minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct E major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Robot Correct.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct G minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files (x86)\Common Files\VST3\Auburn Sounds Graillon 2.vst3 Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Add Sub Quint.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct C major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct C minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct C# minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct E minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct F minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct B minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct D major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct F major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct G# minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files (x86)\Auburn Sounds\Graillon 2\Uninstall.exe Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct D# minor.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Default.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Simple Octaver.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Tuner Doubler.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\x64\Auburn Sounds Graillon 2.aaxplugin Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct F# major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\VSTPlugins\Auburn Sounds Graillon 2-64.dll Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Younger Speech.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct B major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct D# major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct G major.tfx Graillon-2-FREE-2.8.0.exe File created C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Auburn Sounds Graillon 2.aaxplugin\Contents\Factory Presets\Graillon 2\Auburn Sounds Graillon 2 Factory Presets\Correct G# major.tfx Graillon-2-FREE-2.8.0.exe - Loads dropped DLL 1 IoCs
pid Process 5948 Graillon-2-FREE-2.8.0.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Graillon-2-FREE-2.8.0.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsyBFE1.tmp\System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH