Overview
overview
3Static
static
3Debug (4).rar
windows10-2004-x64
1Debug (4).rar
windows11-ltsc_2024-x64
1Debug/Debu...HD.exe
windows10-2004-x64
3Debug/Debu...HD.exe
windows11-ltsc_2024-x64
3Debug/Debu...config
windows10-2004-x64
3Debug/Debu...config
windows11-ltsc_2024-x64
3Debug/Debu...HD.pdb
windows10-2004-x64
3Debug/Debu...HD.pdb
windows11-ltsc_2024-x64
3Debug/Debu...I2.dll
windows10-2004-x64
1Debug/Debu...I2.dll
windows11-ltsc_2024-x64
1Debug/Debu...ue.cur
windows10-2004-x64
3Debug/Debu...ue.cur
windows11-ltsc_2024-x64
3Debug/Debu...di.dll
windows10-2004-x64
1Debug/Debu...di.dll
windows11-ltsc_2024-x64
1Debug/Debu...di.xml
windows10-2004-x64
3Debug/Debu...di.xml
windows11-ltsc_2024-x64
1Debug/Debu...32.dll
windows10-2004-x64
3Debug/Debu...32.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debu....dylib
macos-10.15-amd64
1Debug/Debu...te.dll
windows10-2004-x64
3Debug/Debu...te.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debug/hand.txt
windows10-2004-x64
1Debug/Debug/hand.txt
windows11-ltsc_2024-x64
1Debug/Debu...dr.bmp
windows10-2004-x64
1Debug/Debu...dr.bmp
windows11-ltsc_2024-x64
1Debug/Debu...dr.png
windows10-2004-x64
1Debug/Debu...dr.png
windows11-ltsc_2024-x64
1Debug/Debu...ue.bmp
windows10-2004-x64
1Analysis
- max time kernel
30s - max time network
28s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
Debug (4).rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Debug (4).rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Debug/Debug/Guna.UI2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Debug/Debug/Guna.UI2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Debug/Debug/HandBlue.cur
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Debug/Debug/HandBlue.cur
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
Debug/Debug/hand.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Debug/Debug/hand.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
Debug/Debug/siledr.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Debug/Debug/siledr.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
Debug/Debug/siledr.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Debug/Debug/siledr.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
Debug/Debug/siledr_blue.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target Debug/Debug/siledr.png
- Size 256B
- Sample260905-kr5gvsch75
- SHA256 5ce19c025eb7e6dbab9566f9b53d4470afe0120f1ae1014b5a7f42b92dbbf5bf
- MD5 f0a15afc62b0669cbd33f435e6c3d46b
- SHA1 349ea4ae02c74d0c3fbc7bed62a830838fa7661d
- SHA512 c10d550f3c67667c320c2eb1130234c782243c48da8f554b5b921facba7e632350666ba03ed1f659435d4e3d6eefdd55fbf167251034000bca7de3c8767dd6f6
- TLSH T160D02B854B83ADCCCBC8003F36660420D057127B159880497FE8C21185AA95C4241712
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3604 mspaint.exe 3604 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3604 mspaint.exe 3604 mspaint.exe 3604 mspaint.exe 3604 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Debug\Debug\siledr.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3604
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3940