Overview
overview
3Static
static
3Debug (4).rar
windows10-2004-x64
1Debug (4).rar
windows11-ltsc_2024-x64
1Debug/Debu...HD.exe
windows10-2004-x64
3Debug/Debu...HD.exe
windows11-ltsc_2024-x64
3Debug/Debu...config
windows10-2004-x64
3Debug/Debu...config
windows11-ltsc_2024-x64
3Debug/Debu...HD.pdb
windows10-2004-x64
3Debug/Debu...HD.pdb
windows11-ltsc_2024-x64
3Debug/Debu...I2.dll
windows10-2004-x64
1Debug/Debu...I2.dll
windows11-ltsc_2024-x64
1Debug/Debu...ue.cur
windows10-2004-x64
3Debug/Debu...ue.cur
windows11-ltsc_2024-x64
3Debug/Debu...di.dll
windows10-2004-x64
1Debug/Debu...di.dll
windows11-ltsc_2024-x64
1Debug/Debu...di.xml
windows10-2004-x64
3Debug/Debu...di.xml
windows11-ltsc_2024-x64
1Debug/Debu...32.dll
windows10-2004-x64
3Debug/Debu...32.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debu....dylib
macos-10.15-amd64
1Debug/Debu...te.dll
windows10-2004-x64
3Debug/Debu...te.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debug/hand.txt
windows10-2004-x64
1Debug/Debug/hand.txt
windows11-ltsc_2024-x64
1Debug/Debu...dr.bmp
windows10-2004-x64
1Debug/Debu...dr.bmp
windows11-ltsc_2024-x64
1Debug/Debu...dr.png
windows10-2004-x64
1Debug/Debu...dr.png
windows11-ltsc_2024-x64
1Debug/Debu...ue.bmp
windows10-2004-x64
1Analysis
- user interaction
yes - max time kernel
29s - max time network
30s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
Debug (4).rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Debug (4).rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Debug/Debug/Guna.UI2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Debug/Debug/Guna.UI2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Debug/Debug/HandBlue.cur
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Debug/Debug/HandBlue.cur
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dylib
Resource
macos-20250619-en
Behavioral task
behavioral22
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
Debug/Debug/hand.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
Debug/Debug/hand.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
Debug/Debug/siledr.bmp
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
Debug/Debug/siledr.bmp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
Debug/Debug/siledr.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
Debug/Debug/siledr.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
Debug/Debug/siledr_blue.bmp
Resource
win10v2004-20260513-en
General
- Target Debug (4).rar
- Size 1.8MB
- Sample260905-kr5gvsch75
- SHA256 16a68f7ead085510ff3edc23b3bda3726856692b566d5279b3a0c47e0f105235
- MD5 840f2d1562c26731ecd3ff6aa93dfad0
- SHA1 d9fc32f0e72d7c72bd477c403bc5977e0306e7c7
- SHA512 c8ec042e80396f69fa064e3929defc9232481c85a84e31146ebd55ae45140fc88d9b809c51538c72a3eaf9e0ae63d6a2969c805a4955830a63f7de1f03ebeece
- SSDEEP 49152:MQZ409AKlW2MgJwegLQCQD3b9k6s2Ku7rR7z:MQL9AKlFweLCQDrs2K6
- TLSH T1C58533133C62F5A9E108890DE9D3B07CB78DB986C1DCA6B4812795A33E373A5B50D673
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4932 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 4932 7zFM.exe Token: 35 4932 7zFM.exe Token: SeSecurityPrivilege 4932 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4932 7zFM.exe 4932 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Debug (4).rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4932 -
C:\Users\Admin\AppData\Local\Temp\7zO443EE2C8\EAX Advanced HD.exe"C:\Users\Admin\AppData\Local\Temp\7zO443EE2C8\EAX Advanced HD.exe"2⤵PID:4180
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\7zO443EE2C8\EAX Advanced HD.exe
- Size 64KB
- SHA256 72b5ad672bc9ded4972c4d31ba1023c4e0dde195a30d3d953259880b5337d9f8
- MD5 2fcff56d7ecc48ef31ea26e4fae6ffd1
- SHA1 e92cac0e572cfedfe592aeed724171218edf9f9a
- SHA512 bcebde5a3cf9014abb03aea2e6fae6d7c02bbeede01df2e83c5fe9df253e44f6c0b67969b36b22e44579ff13a2db0641a6541e46e75e8a324a6c7a62de6a438d
- SSDEEP 768:Jb3JAV0jTXihwDYJgtWdNOGzX1Q1S+sOOESEhL3/khCdzzXoTUAv/DTEEYAUgtYs:YVlhwIBssOOEhIbTEEYlgX
- TLSH T1A25381C073368F22D2BCA7F01553548AABF17447A6B9F95C5EFAB4EBA1A4F404441AC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zO443EE2C8\EAX Advanced HD.exe
- Size 1.9MB
- SHA256 451b66ce44e1616ad0939e7c2b1cd3f5a941625eeaeb4dad52efadef823cbf45
- MD5 fc6bd87a2c4bd30d84b7a2172003ac33
- SHA1 49776caca8a67aa919ac0ba5e1e410c56cd53427
- SHA512 ae48424c4ac4d8a7e1ebe916af5992fd7bd0a32f671145b97899cf0c3f065fed84cbc5e58dc7686f543d50dfb8d41f94171df0b8b650bd01b41c5ae957839c65
- SSDEEP 49152:i2xijOuxgaMj3XRD+uj3H2Cuk1+Lda3WvhoUo5c0XWzoZsCKrij:3xijOkDMj3XZ+ujX2Cuk1+Lda3Wvho6g
- TLSH T1839538D2E94485D5FD2E07B2A0279DB016A33DBEEDF4A49D68D9B82615B3243103FC1B
- MD5 SHA1 SHA512 SSDEEP TLSH