Overview
overview
6Static
static
3Staccato I...er.exe
windows10-2004-x64
6Staccato I...er.exe
windows11-ltsc_2024-x64
6$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PROGRAMFI...to.dll
windows10-2004-x64
1$PROGRAMFI...to.dll
windows11-ltsc_2024-x64
1$PROGRAMFI...to.dll
windows10-2004-x64
1$PROGRAMFI...to.dll
windows11-ltsc_2024-x64
1Staccato.exe
windows10-2004-x64
1Staccato.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 04:29
Static task
static1
Behavioral task
behavioral1
Sample
Staccato Installer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Staccato Installer.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Staccato.aaxplugin/Contents/x64/Staccato.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
$PROGRAMFILES64/Common Files/VST3/Staccato.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PROGRAMFILES64/Common Files/VST3/Staccato.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
Staccato.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Staccato.exe
Resource
win11ltsc2024-20260617-en
General
- Target Staccato.exe
- Size 12.0MB
- Sample260623-e4kekaaw6t
- SHA256 5e3f28f1637e346ae57accc67f7717064ec8a64d8e3b9e56969e7c30eb7c3e9a
- MD5 2e2c47e3164a04f4c1b01f44ee8d0b62
- SHA1 9e40e0d89fbed17c6eb09ea8eaca57df9ad314f3
- SHA512 bad519f80f1dd0b38e250e8e5eb8b7c9ffc18315ec785123b8c3dac4f92bae68233d5e8e8266c637834ced9143978b6bbcef1351207a54ea0e7646c266a0543b
- SSDEEP 196608:C1lZtDUvSKMGwtG+7NLml49TKtjblPUBBBBBlkBBBUBBBBBBYkBkkkk4BBlkkkBg:C1lZtpQwtGkNLmChKtf
- TLSH T1EAC6AF87B26540D4C1BAC079C6929526FB727C190320DFDB15A49A6ABF37EE14F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3012 Staccato.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 5280 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 5280 AUDIODG.EXE - Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 3012 Staccato.exe 3012 Staccato.exe 3012 Staccato.exe 3012 Staccato.exe 3012 Staccato.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Staccato.exe"C:\Users\Admin\AppData\Local\Temp\Staccato.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004CC1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5280