Overview
overview
4Static
static
3Anyburn/an...it.exe
windows10-2004-x64
4Anyburn/an...it.exe
windows11-ltsc_2024-x64
4$0.exe
windows10-2004-x64
3$0.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...pt.dll
windows10-2004-x64
3$PLUGINSDI...pt.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3AnyBurn.exe
windows10-2004-x64
3AnyBurn.exe
windows11-ltsc_2024-x64
3MACDll.dll
windows10-2004-x64
3MACDll.dll
windows11-ltsc_2024-x64
3abcmd.exe
windows10-2004-x64
3abcmd.exe
windows11-ltsc_2024-x64
3lame_enc.dll
windows10-2004-x64
3lame_enc.dll
windows11-ltsc_2024-x64
3libFLAC.dll
windows10-2004-x64
3libFLAC.dll
windows11-ltsc_2024-x64
3libvorbis.dll
windows10-2004-x64
3libvorbis.dll
windows11-ltsc_2024-x64
3unicows.dll
windows10-2004-x64
3unicows.dll
windows11-ltsc_2024-x64
3Anyburn/an...it.exe
windows10-2004-x64
4Anyburn/an...it.exe
windows11-ltsc_2024-x64
4$0.exe
windows10-2004-x64
3$0.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...pt.dll
windows10-2004-x64
3$PLUGINSDI...pt.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3AnyBurn.exe
windows10-2004-x64
3AnyBurn.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 18:26
Static task
static1
Behavioral task
behavioral1
Sample
Anyburn/anyburn_setup 32-bit.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Anyburn/anyburn_setup 32-bit.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
AnyBurn.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
AnyBurn.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
MACDll.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
MACDll.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
abcmd.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
abcmd.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
lame_enc.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
lame_enc.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
libFLAC.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
libFLAC.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
libvorbis.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
libvorbis.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
unicows.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
unicows.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Anyburn/anyburn_setup_x64-bit.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Anyburn/anyburn_setup_x64-bit.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
$0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
$0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
$PLUGINSDIR/InstOpt.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
AnyBurn.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
AnyBurn.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target Anyburn/anyburn_setup 32-bit.exe
- Size 2.5MB
- Sample260916-w3ftescc66
- SHA256 e128481aa93098f5bfff8b910b0cacb3d4a9adf993be91c4a6723cb852d373dc
- MD5 35e24137f2b9a7fcbaae808b10c0259d
- SHA1 09324c7322548d3ad2eb0b8cbf37d7d8f10aa2fe
- SHA512 03abdbde4b93a6352a32d8040121762d2351d7c519c303676f2d37b4d1ef69eb6e28c75a13d0494b6f5e3c6d49b35f9d48bff15cfe94102e618f9ca4f8eb6223
- SSDEEP 49152:lCsdgZEhfvYsWHBTUle/Af/6j8NgDz6zNAJly5xVJTpg/dF:lBdHvDleUlNgDz6zNw2pg/dF
- TLSH T19CC533A26756C10AD4C848306AE81FB16DF3FC727B69A70BB375B63BE0763516E15308
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 37 IoCs
description ioc Process File created C:\Program Files (x86)\AnyBurn\Lang\EnglishUK.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\libvorbis.dll anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Readme.txt anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\German.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\French.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Croatian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Finnish.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Swedish.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\uninstall.exe anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\PortugueseBrazil.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Romanian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Russian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Bulgarian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\License.txt anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\English.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\libFLAC.dll anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\SimpChinese.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Polish.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Ukrainian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\abcmd.exe anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Danish.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\MACDll.dll anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Korean.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Indonesian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Greek.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Turkish.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Spanish.ini anyburn_setup 32-bit.exe File opened for modification C:\Program Files (x86)\AnyBurn\AnyBurn.exe anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\lame_enc.dll anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Dutch.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Arabic.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Italian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Slovenian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\TradChinese.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Hungarian.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\PortuguesePortugal.ini anyburn_setup 32-bit.exe File created C:\Program Files (x86)\AnyBurn\Lang\Japanese.ini anyburn_setup 32-bit.exe - Loads dropped DLL 2 IoCs
pid Process 1336 anyburn_setup 32-bit.exe 1336 anyburn_setup 32-bit.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language anyburn_setup 32-bit.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsjA679.tmp\InstOpt.dll
- Size 8KB
- SHA256 313648b948243e992f08eec6e567aca26c2131ca6b9d307dd11071470521baf7
- MD5 a9b4e84b5c71be9aad7cbe44506a6b4e
- SHA1 d3a7b3bed2f4f3cc3edc85e202d202a1a535d62f
- SHA512 0c78a4d8c0c129c26fd3d99e8b04e4598e5d844d0d9f213dd318ae873ffd23db1cb06c0fec636ad7ac8a6f9306dbcae58cf4d8e7d33dca2b7a3a31e6ad36bab8
- SSDEEP 96:S1+HVx8GJYcudkED74Kx2otnc12lDIvyYUJjlMYXJIuT+f9yFGTp:SsPulD74uh2XUtlMwIuqEFGT
- TLSH T16FF155E4A3D17DB7F7BB0B323AE2A3F5DB19BD055E1040446F73025D6435591CA68362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsjA679.tmp\System.dll
- Size 12KB
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
- MD5 8cf2ac271d7679b1d68eefc1ae0c5618
- SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
- SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
- SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
- TLSH T121427D1193B089F2F590593805A67F2A6FBEAC6C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH