Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 12:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PureAudioPlayer.Console.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
PureAudioPlayer.Console.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
libsoxr.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
libsoxr.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target PureAudioPlayer.Console.exe
- Size 7.4MB
- Sample260729-pl27rsthkh
- SHA256 1010628e1902309d651dfbc1c7506a7d4b65d1c8fdd63570e7b8c86b266f936a
- MD5 875f777df0095145b97b22aa07ccb1db
- SHA1 2cf7bd9831f7189df4aaf00328f843b3a9eac866
- SHA512 ee40452bd675fc3b942265e321fc8dd85a75ba1706cf66a3fcc7223c601bec31faf76f28af7d83dd21c1537089bd9a285307518372672021f506348c1ddc3b3e
- SSDEEP 98304:lg13ZgkSJ+rbth/WIQJh/IntQ9S2rhUssy2:KLK0h/WIQJp9SIH2
- TLSH T14D768D85A394C6D9D127D238CAA6C732C6707C495334838F2D59F60A1FB3B41AF3A766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 49 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPU10Add\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAP PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAP\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPU10Add\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" add \"%1\"" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPShuffle PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPShuffle\command PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAP PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPShuffle PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAP\ = "&Play with Pure Audio Player" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAP\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" \"%1\"" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPShuffle\ = "&Shuffle with Pure Audio Player" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPU10Add\ = "&Add to Pure Audio Player" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPShuffle\ = "&Shuffle with Pure Audio Player" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPU10Add\ = "&Add to Pure Audio Player" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPShuffle PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPU10Add\ = "&Add to Pure Audio Player" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPU10Add\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" add \"%1\"" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAP\ = "&Play with Pure Audio Player" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPShuffle\command PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAP\ = "&Play with Pure Audio Player" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAP\command PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPShuffle\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAP\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPU10Add\command PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAP\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8 PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAP\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" \"%1\"" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPShuffle\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" shuffle \"%1\"" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPU10Add PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPU10Add\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPShuffle\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPU10Add PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPU10Add\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAP\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" \"%1\"" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPU10Add\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" add \"%1\"" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPU10Add PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAP PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAP\command PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPShuffle\ = "&Shuffle with Pure Audio Player" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAP\command PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPU10Add\command PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPShuffle\command PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u8\shell\PurAPU10Add\command PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPShuffle\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" shuffle \"%1\"" PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PurAPShuffle\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe\" shuffle \"%1\"" PureAudioPlayer.Console.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell PureAudioPlayer.Console.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\SystemFileAssociations\.m3u\shell\PurAPShuffle\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\PureAudioPlayer.Console.exe" PureAudioPlayer.Console.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4032 PureAudioPlayer.Console.exe