Overview
overview
3Static
static
3Debug (4).rar
windows10-2004-x64
1Debug (4).rar
windows11-ltsc_2024-x64
1Debug/Debu...HD.exe
windows10-2004-x64
3Debug/Debu...HD.exe
windows11-ltsc_2024-x64
3Debug/Debu...config
windows10-2004-x64
3Debug/Debu...config
windows11-ltsc_2024-x64
3Debug/Debu...HD.pdb
windows10-2004-x64
3Debug/Debu...HD.pdb
windows11-ltsc_2024-x64
3Debug/Debu...I2.dll
windows10-2004-x64
1Debug/Debu...I2.dll
windows11-ltsc_2024-x64
1Debug/Debu...ue.cur
windows10-2004-x64
3Debug/Debu...ue.cur
windows11-ltsc_2024-x64
3Debug/Debu...di.dll
windows10-2004-x64
1Debug/Debu...di.dll
windows11-ltsc_2024-x64
1Debug/Debu...di.xml
windows10-2004-x64
3Debug/Debu...di.xml
windows11-ltsc_2024-x64
1Debug/Debu...32.dll
windows10-2004-x64
3Debug/Debu...32.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debu....dylib
macos-10.15-amd64
1Debug/Debu...te.dll
windows10-2004-x64
3Debug/Debu...te.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debug/hand.txt
windows10-2004-x64
1Debug/Debug/hand.txt
windows11-ltsc_2024-x64
1Debug/Debu...dr.bmp
windows10-2004-x64
1Debug/Debu...dr.bmp
windows11-ltsc_2024-x64
1Debug/Debu...dr.png
windows10-2004-x64
1Debug/Debu...dr.png
windows11-ltsc_2024-x64
1Debug/Debu...ue.bmp
windows10-2004-x64
1Analysis
- max time kernel
30s - max time network
31s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
Debug (4).rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Debug (4).rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Debug/Debug/Guna.UI2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Debug/Debug/Guna.UI2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Debug/Debug/HandBlue.cur
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Debug/Debug/HandBlue.cur
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
Debug/Debug/hand.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Debug/Debug/hand.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
Debug/Debug/siledr.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Debug/Debug/siledr.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
Debug/Debug/siledr.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Debug/Debug/siledr.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
Debug/Debug/siledr_blue.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target Debug/Debug/siledr.bmp
- Size 1KB
- Sample260905-kr5gvsch75
- SHA256 e7a5c05f6d7dab7b94023f064ec4b0915d9abbec44ddbc177609b549f042d7ac
- MD5 473fb3f79b5d540ea7318ca3cdcae46b
- SHA1 d235fb95e7b69e6c6cad2bea6d00ceabb381d07e
- SHA512 cac2b38c34d5ef87ad89c8c0cddac900b0177e3d3006d63cc3fdc5be3ff87b48e0f1cb403347b095c38e9a9bf68c89f46e9a866b345adc6320f5fa994948c52a
- TLSH T19E2163C199E5C916DF321032A80F73F45B4E28280AAA28874190BEE3811D5ED8960E88
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3956 mspaint.exe 3956 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3956 mspaint.exe 3956 mspaint.exe 3956 mspaint.exe 3956 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Debug\Debug\siledr.bmp"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3956
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3760