Analysis

  • user interaction
    yes
  • max time kernel
    228s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 22:38

General

  • Target
    LiveTrax-3.0.9-w64-Setup.exe
  • Size 45.9MB
  • Sample260730-2kvgraydqg
  • SHA256 db21c1386756dc6890311f22d1d37aec8eb85374bcfb7b9e58bd291193ec618e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LiveTrax-3.0.9-w64-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\LiveTrax-3.0.9-w64-Setup.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:5228
  • C:\Program Files\LiveTrax3\bin\LiveTrax.exe
    "C:\Program Files\LiveTrax3\bin\LiveTrax.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies registry class
    PID:1172

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LiveTrax.exe

        • Path C:\Program Files\LiveTrax3\bin\LiveTrax.exe
        • Size 27.4MB
        • SHA256 8afa45b6e4aa55020a4b4aa7f1df7ec19200dcc2eccd6758c562a93f7a6aa78f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aaf-0.dll

        • Path C:\Program Files\LiveTrax3\bin\aaf-0.dll
        • Size 622KB
        • SHA256 d86ee6e2bcce96518a2156f52c17baf47c7c9be64cd01a18d16debcb3efa5efd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ardour-3.dll

        • Path C:\Program Files\LiveTrax3\bin\ardour-3.dll
        • Size 23.7MB
        • SHA256 0ad44ab71b6383e82a909a94dd5608b5e01b6e5182840e0ce968343a9f1b1c47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ardourcp.dll

        • Path C:\Program Files\LiveTrax3\bin\ardourcp.dll
        • Size 330KB
        • SHA256 8de94ada671d00fc320cb3b6274d323d2de68e9518356c1ab04c0a5c283551b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        audiographer-0.dll

        • Path C:\Program Files\LiveTrax3\bin\audiographer-0.dll
        • Size 761KB
        • SHA256 2d52d52f147832571c7d07d7589a419e809e8882c20d6fb09bf6be583abdbc5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        canvas-0.dll

        • Path C:\Program Files\LiveTrax3\bin\canvas-0.dll
        • Size 1020KB
        • SHA256 daf25e2a83d94eecc179a2b6a02e723485d6ced4c007c88b35a520fdadd42736
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evoral-0.dll

        • Path C:\Program Files\LiveTrax3\bin\evoral-0.dll
        • Size 864KB
        • SHA256 fc933323fc2b03a172ba726943d520d0472653b42855366c416d343457fc1ea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtkmm2ext-0.dll

        • Path C:\Program Files\LiveTrax3\bin\gtkmm2ext-0.dll
        • Size 972KB
        • SHA256 7b19cad51796153b949a220e92ecf6ebc345ced88d07293f613cec6d33bbbd9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcairo-2.dll

        • Path C:\Program Files\LiveTrax3\bin\libcairo-2.dll
        • Size 1.7MB
        • SHA256 494c2e2b135fb3c7b655fe7f05c8ee52a7041290c82f4940f588e92b249e9713
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcairomm-1.0-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libcairomm-1.0-1.dll
        • Size 315KB
        • SHA256 4a5d5e52b9b200dbd7d07055ff9ede92efb698d620b7567627ef84603f8a9398
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcurl-4.dll

        • Path C:\Program Files\LiveTrax3\bin\libcurl-4.dll
        • Size 1.0MB
        • SHA256 0921f3f81450375f46db963170ef4c9b10e38dcdb4b434ba01a71240c6acf883
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libfftw3f-3.dll

        • Path C:\Program Files\LiveTrax3\bin\libfftw3f-3.dll
        • Size 2.9MB
        • SHA256 1b8e2d56ca4e67b66df9cae47afae28eaebf275b3b84b25c8b5832e890191f38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libfontconfig-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libfontconfig-1.dll
        • Size 802KB
        • SHA256 c0de1f9bf40f2c98f6638f98bffdf510282e23af1f0fb6fb1c6c5d4e393f8f85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgcc_s_seh-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libgcc_s_seh-1.dll
        • Size 592KB
        • SHA256 201bf8a54ebb490f93ea4beb20740a483bf67036b90b5720f32d0c746a72d1e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libglib-2.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libglib-2.0-0.dll
        • Size 6.6MB
        • SHA256 43ec7a9f7f78aad5140ddb1d779169d9db4ab604b0c675460de3cb0a9562c1ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libglibmm-2.4-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libglibmm-2.4-1.dll
        • Size 846KB
        • SHA256 4ef19e4cc17d3096fbe1b8eb0d53d4b3b82a96e420dc1e75f01a288f81e46986
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libgobject-2.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libgobject-2.0-0.dll
        • Size 1.8MB
        • SHA256 2dc3b2b06698c6dc0707dbd2854a2d20d0169c3b6a456c950147e96cfb121d86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libintl-8.dll

        • Path C:\Program Files\LiveTrax3\bin\libintl-8.dll
        • Size 480KB
        • SHA256 6f2792a6fdda141c6404f6064893d4c70a0f619917d8ec535941b02ebedad4a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblo-7.dll

        • Path C:\Program Files\LiveTrax3\bin\liblo-7.dll
        • Size 556KB
        • SHA256 02c72fc14ba0cc830c79a3e87430b36af96f4b64059333ec36427a0150799c4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpango-1.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libpango-1.0-0.dll
        • Size 1.4MB
        • SHA256 37f469777e95e14cc0835289130fa47db62a60afcca38d8233a031865ce0809a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangocairo-1.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libpangocairo-1.0-0.dll
        • Size 419KB
        • SHA256 0e8c7c5387627c617c37fda1a61cd1dce3fef307b5df0a23fa0ecaf9fe2e69ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangoft2-1.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libpangoft2-1.0-0.dll
        • Size 584KB
        • SHA256 f0319c81f6193b1184fdbcdd75515034b7b4d12609893a1d75ef4eca5193fedc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpangomm-1.4-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libpangomm-1.4-1.dll
        • Size 345KB
        • SHA256 ef5a415b669eb9e3ba69c9d9d78f408679c65208195e2edf19f9e72c1480a045
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libsigc-2.0-0.dll

        • Path C:\Program Files\LiveTrax3\bin\libsigc-2.0-0.dll
        • Size 113KB
        • SHA256 a146ad2e70ac7a786fdb23acc0c7253c58a761469870bae45078cca237dc7efe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libstdc++-6.dll

        • Path C:\Program Files\LiveTrax3\bin\libstdc++-6.dll
        • Size 25.4MB
        • SHA256 a1d96a848a567d7657e152cfe92e2fd62da412968cc11ec8bdb04bf20ebc5747
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libwinpthread-1.dll

        • Path C:\Program Files\LiveTrax3\bin\libwinpthread-1.dll
        • Size 358KB
        • SHA256 92caeb8a4ea281c674003462a233f3b445b685b0a6f93eb11254feda2dda9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libxml2-2.dll

        • Path C:\Program Files\LiveTrax3\bin\libxml2-2.dll
        • Size 2.3MB
        • SHA256 21950c96e839c4416aa6a5d1e77bb4933eb422d655feeb3006939e73dbee1da5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        midipp-4.dll

        • Path C:\Program Files\LiveTrax3\bin\midipp-4.dll
        • Size 799KB
        • SHA256 173ee218bccf0ac102d76f4645ae22b92c01701aa7705c86762539f3c86be41b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pbd-4.dll

        • Path C:\Program Files\LiveTrax3\bin\pbd-4.dll
        • Size 1.5MB
        • SHA256 beeb44f42d4648763c9844b0c127699c16766a0c55a9654eab7a7a39aeb4dcb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ptformat-0.dll

        • Path C:\Program Files\LiveTrax3\bin\ptformat-0.dll
        • Size 337KB
        • SHA256 08ce812c3234645c827bbc2caf42df387e2abc58fa1c84485ca2d86fe263ec4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temporal-0.dll

        • Path C:\Program Files\LiveTrax3\bin\temporal-0.dll
        • Size 818KB
        • SHA256 8091cc1db7c7ab31d3576c2a1d5f1bf0cc15e5d6f937b5ff6ad2b18c324033b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ydk-2.dll

        • Path C:\Program Files\LiveTrax3\bin\ydk-2.dll
        • Size 1.7MB
        • SHA256 7e3d1ffda888c8b48ba575aa378f81c44de8cf4a2817793009499c1e64ccc90f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ydkmm-2.dll

        • Path C:\Program Files\LiveTrax3\bin\ydkmm-2.dll
        • Size 500KB
        • SHA256 a33aaf37b639f0daad5829479f41979ec88881b244c2785d39890d1917a36da2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsz73C1.tmp\System.dll
        • Size 26KB
        • SHA256 3b7ae06666fb4277974766409349d0f14d4358e15a20c6c078a29c6021b4a779
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsz73C1.tmp\nsDialogs.dll
        • Size 12KB
        • SHA256 a29754f0b21fbb92265f1fb924b3423a330704bbf56796da67aeca876dbd3326
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1172-968-0x00000000050E0000-0x00000000051D5000-memory.dmp

        memory/1172-971-0x0000000062140000-0x0000000062178000-memory.dmp

        memory/1172-1000-0x0000000061CC0000-0x0000000061D32000-memory.dmp

        memory/1172-1002-0x0000000065880000-0x00000000658E4000-memory.dmp

        memory/1172-1006-0x0000000064940000-0x000000006499B000-memory.dmp

        memory/1172-1017-0x00000000663C0000-0x0000000066446000-memory.dmp

        memory/1172-956-0x0000000000170000-0x00000000001A7000-memory.dmp

        memory/1172-958-0x0000000003540000-0x0000000003641000-memory.dmp

        memory/1172-955-0x0000000001F10000-0x0000000002578000-memory.dmp

        memory/1172-960-0x0000000004D30000-0x0000000004FB7000-memory.dmp

        memory/1172-964-0x0000000005380000-0x0000000005D38000-memory.dmp

        memory/1172-965-0x0000000003650000-0x0000000004D26000-memory.dmp

        memory/1172-959-0x0000000002580000-0x00000000033E2000-memory.dmp

        memory/1172-963-0x00000000052D0000-0x0000000005379000-memory.dmp

        memory/1172-962-0x00000000001B0000-0x00000000001EA000-memory.dmp

        memory/1172-1016-0x000000006AB80000-0x000000006AC30000-memory.dmp

        memory/1172-969-0x0000000005D40000-0x0000000005F40000-memory.dmp

        memory/1172-973-0x000000006EAC0000-0x000000006EAFC000-memory.dmp

        memory/1172-974-0x0000000007D20000-0x0000000007D9B000-memory.dmp

        memory/1172-977-0x0000000063D80000-0x0000000063DD2000-memory.dmp

        memory/1172-976-0x0000000061F00000-0x0000000061F5C000-memory.dmp

        memory/1172-972-0x00000000664C0000-0x0000000066543000-memory.dmp

        memory/1172-981-0x0000000007DA0000-0x0000000007DF2000-memory.dmp

        memory/1172-984-0x0000000009020000-0x0000000009043000-memory.dmp

        memory/1172-991-0x00000000094C0000-0x0000000009506000-memory.dmp

        memory/1172-990-0x00000000094C0000-0x0000000009506000-memory.dmp

        memory/1172-989-0x00000000094C0000-0x000000000950B000-memory.dmp

        memory/1172-988-0x00000000094C0000-0x000000000950B000-memory.dmp

        memory/1172-987-0x0000000009450000-0x00000000094B8000-memory.dmp

        memory/1172-985-0x0000000009450000-0x00000000094B8000-memory.dmp

        memory/1172-982-0x0000000008F90000-0x000000000901D000-memory.dmp

        memory/1172-979-0x0000000007DA0000-0x0000000007DF2000-memory.dmp

        memory/1172-978-0x0000000008E80000-0x0000000008F83000-memory.dmp

        memory/1172-1032-0x0000000066600000-0x000000006665D000-memory.dmp

        memory/1172-967-0x00000000051E0000-0x0000000005254000-memory.dmp

        memory/1172-966-0x0000000005040000-0x00000000050DA000-memory.dmp

        memory/1172-957-0x00000000033F0000-0x000000000353D000-memory.dmp

        memory/1172-961-0x0000000004FC0000-0x000000000503E000-memory.dmp

        memory/1172-1019-0x000000006C100000-0x000000006C150000-memory.dmp

        memory/1172-1022-0x000000006D8C0000-0x000000006D8F6000-memory.dmp

        memory/1172-1030-0x00000000676C0000-0x0000000067742000-memory.dmp

        memory/1172-1027-0x0000000066C40000-0x0000000066C6A000-memory.dmp

        memory/1172-1028-0x000000006AE40000-0x000000006AE63000-memory.dmp

        memory/1172-1026-0x0000000068B40000-0x0000000068BC5000-memory.dmp

        memory/1172-1023-0x0000000062E80000-0x0000000062EA9000-memory.dmp

        memory/1172-1021-0x000000006BDC0000-0x000000006BE10000-memory.dmp

        memory/1172-1014-0x00000000670C0000-0x0000000067153000-memory.dmp

        memory/1172-1015-0x000000006A040000-0x000000006A095000-memory.dmp

        memory/1172-1013-0x000000006E380000-0x000000006E413000-memory.dmp

        memory/1172-1011-0x0000000067C00000-0x0000000067C99000-memory.dmp

        memory/1172-1010-0x000000006AA00000-0x000000006AA22000-memory.dmp

        memory/1172-1009-0x0000000062B80000-0x0000000062C1B000-memory.dmp

        memory/1172-1008-0x0000000061440000-0x00000000614CB000-memory.dmp

        memory/1172-1007-0x000000006EAC0000-0x000000006EAFC000-memory.dmp

        memory/1172-1003-0x000000006E7C0000-0x000000006E849000-memory.dmp

        memory/1172-1001-0x0000000066C80000-0x0000000066D08000-memory.dmp

        memory/1172-997-0x00000000664C0000-0x0000000066543000-memory.dmp

        memory/1172-996-0x0000000064F80000-0x000000006503F000-memory.dmp

        memory/1172-993-0x0000000062140000-0x0000000062178000-memory.dmp

        memory/5228-892-0x0000000000400000-0x0000000000461000-memory.dmp

        memory/5228-4-0x0000000074408000-0x0000000074409000-memory.dmp

        memory/5228-6-0x0000000000400000-0x0000000000461000-memory.dmp

        memory/5228-7-0x0000000074400000-0x000000007440E000-memory.dmp

        memory/5228-28-0x0000000000400000-0x0000000000461000-memory.dmp

        memory/5228-224-0x0000000000400000-0x0000000000461000-memory.dmp