Overview
overview
8Static
static
1full.zip
windows10-2004-x64
1full.zip
windows11-ltsc_2024-x64
1.gitignore
windows10-2004-x64
3.gitignore
windows11-ltsc_2024-x64
8CLA.md
windows10-2004-x64
3CLA.md
windows11-ltsc_2024-x64
3CONTRIBUTING.md
windows10-2004-x64
3CONTRIBUTING.md
windows11-ltsc_2024-x64
3LICENSE
windows10-2004-x64
1LICENSE
windows11-ltsc_2024-x64
1Main.ahk
windows10-2004-x64
3Main.ahk
windows11-ltsc_2024-x64
8NOTICE
windows10-2004-x64
1NOTICE
windows11-ltsc_2024-x64
1README.md
windows10-2004-x64
3README.md
windows11-ltsc_2024-x64
3images/Dis...go.png
windows10-2004-x64
1images/Dis...go.png
windows11-ltsc_2024-x64
1images/OpenMacro.png
windows10-2004-x64
1images/OpenMacro.png
windows11-ltsc_2024-x64
1images/Ope...ck.png
windows10-2004-x64
1images/Ope...ck.png
windows11-ltsc_2024-x64
8library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/JSON.ahk
windows10-2004-x64
3library/JSON.ahk
windows11-ltsc_2024-x64
3settings/offsets.json
windows10-2004-x64
3settings/offsets.json
windows11-ltsc_2024-x64
3shared/Appraise.ahk
windows10-2004-x64
3shared/Appraise.ahk
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
full.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
full.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
.gitignore
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
.gitignore
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
CLA.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
CLA.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
CONTRIBUTING.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
CONTRIBUTING.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
LICENSE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
LICENSE
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Main.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Main.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
NOTICE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
NOTICE
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
README.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
images/DiscordLogo.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
images/DiscordLogo.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
images/OpenMacro.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
images/OpenMacro.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
images/OpenMacroBlack.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
images/OpenMacroBlack.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
library/Discord/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
library/Discord/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
library/JSON.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
library/JSON.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
settings/offsets.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
settings/offsets.json
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
shared/Appraise.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
shared/Appraise.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
General
- Target images/DiscordLogo.png
- Size 112KB
- Sample260628-y4rcnadv21
- SHA256 51388fa374938017e4cb818fd9a7acd6de68b1d56798986545d2e49cfabf8176
- MD5 7fc7ac037b60a97abb7cc57eab9c02b0
- SHA1 417b4d3f6b9844dc4d560e29bb7bc0c998f0e916
- SHA512 91f0f7a2211dede51f52df120cf5c06047ee403e8aa57de9015763428c4dca81bfc04aa6aa16f1c5e775387aad16278e8d46bd2613c0806716d145fb624f810a
- SSDEEP 1536:emUfSLe7SOzuhPkVm4vxCwjb/1EDlRJmhH4YSM9z4H2lXyJ4H:jUqLe7aP6mendEkhYYIWlimH
- TLSH T1A5B37BA8DD031CA7FE4040B6899B0F64FB910971C862A7074374F22D6D8B75B7F4B9A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2548 mspaint.exe 2548 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2548 mspaint.exe 2548 mspaint.exe 2548 mspaint.exe 2548 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\images\DiscordLogo.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2548
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2408