Overview
overview
8Static
static
1full.zip
windows10-2004-x64
1full.zip
windows11-ltsc_2024-x64
1.gitignore
windows10-2004-x64
3.gitignore
windows11-ltsc_2024-x64
8CLA.md
windows10-2004-x64
3CLA.md
windows11-ltsc_2024-x64
3CONTRIBUTING.md
windows10-2004-x64
3CONTRIBUTING.md
windows11-ltsc_2024-x64
3LICENSE
windows10-2004-x64
1LICENSE
windows11-ltsc_2024-x64
1Main.ahk
windows10-2004-x64
3Main.ahk
windows11-ltsc_2024-x64
8NOTICE
windows10-2004-x64
1NOTICE
windows11-ltsc_2024-x64
1README.md
windows10-2004-x64
3README.md
windows11-ltsc_2024-x64
3images/Dis...go.png
windows10-2004-x64
1images/Dis...go.png
windows11-ltsc_2024-x64
1images/OpenMacro.png
windows10-2004-x64
1images/OpenMacro.png
windows11-ltsc_2024-x64
1images/Ope...ck.png
windows10-2004-x64
1images/Ope...ck.png
windows11-ltsc_2024-x64
8library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/JSON.ahk
windows10-2004-x64
3library/JSON.ahk
windows11-ltsc_2024-x64
3settings/offsets.json
windows10-2004-x64
3settings/offsets.json
windows11-ltsc_2024-x64
3shared/Appraise.ahk
windows10-2004-x64
3shared/Appraise.ahk
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
full.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
full.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
.gitignore
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
.gitignore
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
CLA.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
CLA.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
CONTRIBUTING.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
CONTRIBUTING.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
LICENSE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
LICENSE
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Main.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Main.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
NOTICE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
NOTICE
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
README.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
images/DiscordLogo.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
images/DiscordLogo.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
images/OpenMacro.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
images/OpenMacro.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
images/OpenMacroBlack.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
images/OpenMacroBlack.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
library/Discord/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
library/Discord/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
library/JSON.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
library/JSON.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
settings/offsets.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
settings/offsets.json
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
shared/Appraise.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
shared/Appraise.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
General
- Target images/OpenMacro.png
- Size 6KB
- Sample260628-y4rcnadv21
- SHA256 72964a5442f1ea46612a4460c94a0196b6c609ba13e8ff85d9f2f3a771f29831
- MD5 24400dd63a8889c8a5e11a3529a4b0c7
- SHA1 0811213fd7979e9d39178971dd7708343c6b66aa
- SHA512 3b4ea43de20fed33bc2849c0a1d00f6c9b33cbe11b14a1c7818adfa06b80d9d9084ab16988fca3e93ea9e9a2ebc585f864fcb3fd9f33854340a7803826db1bc8
- SSDEEP 192:USe50m/YCrQUz/lmy9nRrItp0a4wZETH8EPyW:Thm/prpJmyBtIARwuH8EPv
- TLSH T1A4D11A820255B5DFCE3696F31CA45BA248F94D4871B63A1396C5A3001963E2D3F8A37B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2804 mspaint.exe 2804 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2804 mspaint.exe 2804 mspaint.exe 2804 mspaint.exe 2804 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\images\OpenMacro.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2804
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3204