Analysis
- user interaction
yes - max time kernel
150s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/07/2026, 04:34
Behavioral task
behavioral1
Sample
Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/VoicemodDesktop.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/VoicemodDesktop.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/lib/VoicemodSDKDotNET.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/lib/VoicemodSDKDotNET.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
Voicemod.Pro.v1.2.6.7.Cracked/VoicemodSetup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Voicemod.Pro.v1.2.6.7.Cracked/VoicemodSetup.exe
Resource
win11ltsc2024-20260629-en
General
- Target Voicemod.Pro.v1.2.6.7.Cracked/Voicemod.Pro.v1.2.6.7.Cracked/VoicemodDesktop.exe
- Size 2.3MB
- Sample260704-e7gg3sfs9k
- SHA256 b523b5c8e00d17dcccf9361de60b55a94b82b7c3f99e7a1bc8f360dfbf0085d3
- MD5 a7a9f1e62af46756fa9a398273bd532d
- SHA1 70336382aa5b56b7056b5595f43045d336656072
- SHA512 bd9e1c0cd2f8f5019c5e51ddd27d022a383f28897fc771af85d0f38c8ee1e72ea334e4f50b395d084a5bf2e0d1bf835d82209ef153da8f493f2ddbf9cca2ad5b
- SSDEEP 24576:IGLjWwo2aKdZqMx6v1UpexYxxNFscBh66afIaYYXpviEwromNzWF60O8wr+i:IgDq0GAlF7LafIXYXpdwBPew
- TLSH T1B8B58C513BA0C809D47A6E359D30C5EC97327C06EE66E60F78D63B5F29BA7924E11323
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral2/memory/2828-1-0x00000195BDA30000-0x00000195BDC78000-memory.dmp ConfuserEx
Processes
-
C:\Users\Admin\AppData\Local\Temp\Voicemod.Pro.v1.2.6.7.Cracked\Voicemod.Pro.v1.2.6.7.Cracked\VoicemodDesktop.exe"C:\Users\Admin\AppData\Local\Temp\Voicemod.Pro.v1.2.6.7.Cracked\Voicemod.Pro.v1.2.6.7.Cracked\VoicemodDesktop.exe"1⤵PID:2828
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1916
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2156