Overview
overview
8Static
static
1full.zip
windows10-2004-x64
1full.zip
windows11-ltsc_2024-x64
1.gitignore
windows10-2004-x64
3.gitignore
windows11-ltsc_2024-x64
8CLA.md
windows10-2004-x64
3CLA.md
windows11-ltsc_2024-x64
3CONTRIBUTING.md
windows10-2004-x64
3CONTRIBUTING.md
windows11-ltsc_2024-x64
3LICENSE
windows10-2004-x64
1LICENSE
windows11-ltsc_2024-x64
1Main.ahk
windows10-2004-x64
3Main.ahk
windows11-ltsc_2024-x64
8NOTICE
windows10-2004-x64
1NOTICE
windows11-ltsc_2024-x64
1README.md
windows10-2004-x64
3README.md
windows11-ltsc_2024-x64
3images/Dis...go.png
windows10-2004-x64
1images/Dis...go.png
windows11-ltsc_2024-x64
1images/OpenMacro.png
windows10-2004-x64
1images/OpenMacro.png
windows11-ltsc_2024-x64
1images/Ope...ck.png
windows10-2004-x64
1images/Ope...ck.png
windows11-ltsc_2024-x64
8library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/Di...er.ahk
windows10-2004-x64
3library/Di...er.ahk
windows11-ltsc_2024-x64
3library/JSON.ahk
windows10-2004-x64
3library/JSON.ahk
windows11-ltsc_2024-x64
3settings/offsets.json
windows10-2004-x64
3settings/offsets.json
windows11-ltsc_2024-x64
3shared/Appraise.ahk
windows10-2004-x64
3shared/Appraise.ahk
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
full.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
full.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
.gitignore
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
.gitignore
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
CLA.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
CLA.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
CONTRIBUTING.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
CONTRIBUTING.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
LICENSE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
LICENSE
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Main.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Main.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
NOTICE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
NOTICE
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
README.md
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
images/DiscordLogo.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
images/DiscordLogo.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
images/OpenMacro.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
images/OpenMacro.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
images/OpenMacroBlack.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
images/OpenMacroBlack.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
library/Discord/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
library/Discord/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
library/JSON.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
library/JSON.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
settings/offsets.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
settings/offsets.json
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
shared/Appraise.ahk
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
shared/Appraise.ahk
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
General
- Target images/OpenMacroBlack.png
- Size 6KB
- Sample260628-y4rcnadv21
- SHA256 e7c3623c41b62e48718c11f1e833aa7b86d47e18e69ffc42b510f72b4ab9f55b
- MD5 ceec76c94c350ee46fa940890645984c
- SHA1 2aafc2184b921148dc6d21147f87185385e8aeb1
- SHA512 16e65b4b1c96a1c0a61edb34396ec52158620eed6cc2deb2ecd6fe9fb0615fa20d543292a1d3c672a2a451591abe3dd21d68a477553fbecdaa0dcd09cd0a25a7
- SSDEEP 192:USP6GT/wjEoNsLknyW+RGcIvTIqeJY3YW:TP6CwjEiyW+RGcI8LJY3YW
- TLSH T156E14B126152CCAAB5443FB70AF5D4CF5C4F68891D8C730FE0E1E6648A1A117C398D7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4352 mspaint.exe 4352 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4352 mspaint.exe 4352 mspaint.exe 4352 mspaint.exe 4352 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\images\OpenMacroBlack.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4352
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1380