Overview
overview
7Static
static
3Starbound.1.4.4.rar
windows10-2004-x64
1Starbound.1.4.4.rar
windows11-ltsc_2024-x64
1Starbound....es.url
windows10-2004-x64
1Starbound....es.url
windows11-ltsc_2024-x64
1Starbound....me.txt
windows10-2004-x64
1Starbound....me.txt
windows11-ltsc_2024-x64
1Starbound....un.inf
windows10-2004-x64
1Starbound....un.inf
windows11-ltsc_2024-x64
1Starbound....-1.bin
windows10-2004-x64
3Starbound....-1.bin
windows11-ltsc_2024-x64
3Starbound....os.jpg
windows10-2004-x64
1Starbound....os.jpg
windows11-ltsc_2024-x64
1Starbound....up.exe
windows10-2004-x64
7Starbound....up.exe
windows11-ltsc_2024-x64
7Starbound...._0.ico
windows10-2004-x64
3Starbound...._0.ico
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
195s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/07/2026, 04:29
Behavioral task
behavioral1
Sample
Starbound.1.4.4.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Starbound.1.4.4.rar
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Starbound.1.4.4/More than 5000+ games.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Starbound.1.4.4/More than 5000+ games.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Starbound.1.4.4/Readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Starbound.1.4.4/Readme.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Starbound.1.4.4/autorun.inf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Starbound.1.4.4/autorun.inf
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
Starbound.1.4.4/elamigos-1.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Starbound.1.4.4/elamigos-1.bin
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Starbound.1.4.4/elamigos.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Starbound.1.4.4/elamigos.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Starbound.1.4.4/setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Starbound.1.4.4/setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Starbound.1.4.4/starbound_0.ico
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Starbound.1.4.4/starbound_0.ico
Resource
win11ltsc2024-20260710-en
General
- Target Starbound.1.4.4/elamigos.jpg
- Size 33KB
- Sample260715-e4da9abw7p
- SHA256 87db0fc1299e1460569f4ed9583e1e53e22b6402d741d960bf4b7ade3e4b41ff
- MD5 150332d4f3de60a5e933dd0ba00a771f
- SHA1 63866488d1772d0c8a1ff08077d604d8390c2e71
- SHA512 3b462f69826b8c31dec3418161938d568497f4b0939e5bb39f5e430f4e98940e0036eeeed7f3d7a6bd69ae13293b4bd0a1e995cffb0b95f34c33031388dd1270
- SSDEEP 384:6SbZbC1GHcTIjF5Xn8slNh0Omj7tJRvlUYORbxgvq2cX0WOh0eMOaZbw7oHEyVq2:6SbdCTWSskebayZOh0eFaZbwUkyc2
- TLSH T196F2370BA91ACF17601487E67E635D696F9F2B0D88D576EE022B0C8F1E813B40DDD21E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3080 mspaint.exe 3080 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3080 mspaint.exe 3080 mspaint.exe 3080 mspaint.exe 3080 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Starbound.1.4.4\elamigos.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3080
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:628