Overview
overview
3Static
static
3Debug (4).rar
windows10-2004-x64
1Debug (4).rar
windows11-ltsc_2024-x64
1Debug/Debu...HD.exe
windows10-2004-x64
3Debug/Debu...HD.exe
windows11-ltsc_2024-x64
3Debug/Debu...config
windows10-2004-x64
3Debug/Debu...config
windows11-ltsc_2024-x64
3Debug/Debu...HD.pdb
windows10-2004-x64
3Debug/Debu...HD.pdb
windows11-ltsc_2024-x64
3Debug/Debu...I2.dll
windows10-2004-x64
1Debug/Debu...I2.dll
windows11-ltsc_2024-x64
1Debug/Debu...ue.cur
windows10-2004-x64
3Debug/Debu...ue.cur
windows11-ltsc_2024-x64
3Debug/Debu...di.dll
windows10-2004-x64
1Debug/Debu...di.dll
windows11-ltsc_2024-x64
1Debug/Debu...di.xml
windows10-2004-x64
3Debug/Debu...di.xml
windows11-ltsc_2024-x64
1Debug/Debu...32.dll
windows10-2004-x64
3Debug/Debu...32.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debu....dylib
macos-10.15-amd64
1Debug/Debu...te.dll
windows10-2004-x64
3Debug/Debu...te.dll
windows11-ltsc_2024-x64
3Debug/Debu...64.dll
windows10-2004-x64
1Debug/Debu...64.dll
windows11-ltsc_2024-x64
1Debug/Debug/hand.txt
windows10-2004-x64
1Debug/Debug/hand.txt
windows11-ltsc_2024-x64
1Debug/Debu...dr.bmp
windows10-2004-x64
1Debug/Debu...dr.bmp
windows11-ltsc_2024-x64
1Debug/Debu...dr.png
windows10-2004-x64
1Debug/Debu...dr.png
windows11-ltsc_2024-x64
1Debug/Debu...ue.bmp
windows10-2004-x64
1Analysis
- max time kernel
30s - max time network
31s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 08:51
Static task
static1
Behavioral task
behavioral1
Sample
Debug (4).rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Debug (4).rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Debug/Debug/EAX Advanced HD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Debug/Debug/EAX Advanced HD.exe.config
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Debug/Debug/EAX Advanced HD.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Debug/Debug/Guna.UI2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Debug/Debug/Guna.UI2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Debug/Debug/HandBlue.cur
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Debug/Debug/HandBlue.cur
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Debug/Debug/Melanchall.DryWetMidi.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Debug/Debug/Melanchall.DryWetMidi.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Debug/Debug/Melanchall_DryWetMidi_Native32.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Debug/Debug/Melanchall_DryWetMidi_Native64.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Debug/Debug/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Debug/Debug/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
Debug/Debug/hand.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Debug/Debug/hand.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
Debug/Debug/siledr.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Debug/Debug/siledr.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
Debug/Debug/siledr.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Debug/Debug/siledr.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
Debug/Debug/siledr_blue.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target Debug/Debug/siledr_blue.bmp
- Size 3KB
- Sample260905-kr5gvsch75
- SHA256 d39fcb8e8892aa7f20cf053d9b48c9815bc2ec21ed492e13bd208aabe085f78d
- MD5 85d4e51a67f3daf8e322d5840760c4d0
- SHA1 0a71e8212c4b00f7802411c594c44b392d2db281
- SHA512 d66014acc09e74821ae35cd8e27d488f4c02eed7d361065043e3e3270eae558ae9f207a9497ab16e31071cd48a80f8962ac2c28441687d254c2f5ff91c826a46
- TLSH T140715BAD44940E64C23FF675846A892BCC14E850BD4936447E044CB7E0D60DBBE3BAF0
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1568 mspaint.exe 1568 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1568 mspaint.exe 1568 mspaint.exe 1568 mspaint.exe 1568 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Debug\Debug\siledr_blue.bmp"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1568
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4644