Overview
overview
8Static
static
8winamp_lat...ll.exe
windows10-2004-x64
8$PLUGINSDI...er.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows10-2004-x64
1$R0/Bento/...ot.png
windows10-2004-x64
1$R0/Bento/...e.maki
windows10-2004-x64
3$R0/Bento/...o.maki
windows10-2004-x64
3$R0/Bento/...t.maki
windows10-2004-x64
3$R0/Bento/skin.xml
windows10-2004-x64
3$R0/Bento/...rt.jpg
windows10-2004-x64
1$R0/Bento/...ig.png
windows10-2004-x64
1$R0/Bento/...ls.png
windows10-2004-x64
1$R0/Bento/...er.png
windows10-2004-x64
1$R0/Bento/...le.png
windows10-2004-x64
1$R0/Bento/...lp.png
windows10-2004-x64
1$R0/Bento/...ns.png
windows10-2004-x64
1$R0/Bento/...ay.png
windows10-2004-x64
1$R0/Bento/...ew.png
windows10-2004-x64
1$R0/Bento/...nt.png
windows10-2004-x64
1$R0/Bento/...er.png
windows10-2004-x64
1$R0/Bento/...rt.jpg
windows10-2004-x64
1$R0/Bento/...rs.png
windows10-2004-x64
1$R0/Bento/...de.png
windows10-2004-x64
1$R0/Bento/...ui.png
windows10-2004-x64
1$R0/Bento/...i2.png
windows10-2004-x64
1$R0/Bento/...ts.png
windows10-2004-x64
1$R0/Bento/...ow.png
windows10-2004-x64
1$R0/Bento/...ig.xml
windows10-2004-x64
3$R0/Bento/...ts.xml
windows10-2004-x64
3$R0/Bento/...al.xml
windows10-2004-x64
3$R0/Bento/...er.xml
windows10-2004-x64
3$R0/Bento/...ts.xml
windows10-2004-x64
3$R0/Bento/...up.xml
windows10-2004-x64
3Analysis
- max time kernel
298s - max time network
261s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 03:26
Behavioral task
behavioral1
Sample
winamp_latest_full.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$R0/Bento/screenshot.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$R0/Bento/scripts/mcvcore.maki
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$R0/Bento/scripts/playlistpro.maki
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$R0/Bento/scripts/pledit.maki
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$R0/Bento/skin.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$R0/Bento/window/aol_radio_alb_art.jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$R0/Bento/window/config.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$R0/Bento/window/controls.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$R0/Bento/window/equalizer.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$R0/Bento/window/menu_file.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
$R0/Bento/window/menu_help.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$R0/Bento/window/menu_options.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
$R0/Bento/window/menu_play.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$R0/Bento/window/menu_view.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
$R0/Bento/window/numfont.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$R0/Bento/window/player.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
$R0/Bento/window/sc_alb_art.jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$R0/Bento/window/scrollbars.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
$R0/Bento/window/shade.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$R0/Bento/window/sui.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
$R0/Bento/window/sui2.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$R0/Bento/window/window-elements.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
$R0/Bento/window/window.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
$R0/Bento/xml/config.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
$R0/Bento/xml/notifier-elements.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$R0/Bento/xml/notifier-normal.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
$R0/Bento/xml/notifier.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$R0/Bento/xml/player-elements.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target $PLUGINSDIR/modern-header.bmp
- Size 25KB
- Sample260730-dzcy9astbx
- SHA256 88e8a05be9cfb8daec31872c8322b7313b66ceaa45c361f8efeda53809f46910
- MD5 827358320dd8861c44eac1e220047c29
- SHA1 f31677b280a72c6b2eb87fa206f0586194f2029b
- SHA512 ac27f720a9bf69ddb5821730558ad1b838dcad6cf9eae9990a8051339321ae912e4dc7751238ce3ccd9a1f615ab60b622e3c3248fd808fee63f39b7a38986fc7
- SSDEEP 192:eCaZM20xGzX29rAO0hCrM9G2QKf3FQ3i8Xo0q++ZsITZJGp:eY2eGYgYv2pf3FQb8+yTw
- TLSH T1B3C2D9B0F0F5ECE6E553255079ADF86511DF1F807A65060C385FBA2C6EB3B062089E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3440 mspaint.exe 3440 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3440 mspaint.exe 3440 mspaint.exe 3440 mspaint.exe 3440 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\modern-header.bmp"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3440
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4864