Analysis

  • max time kernel
    40s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/10/2026, 22:45

General

  • Target
    audacious-4.6.1-win32.exe
  • Size 48.2MB
  • Sample261022-2phzhsvtet
  • SHA256 d13c2cd12621692f37b2f8dbf89dfd7457d2020c69ac6610c79dad00a50c7d00
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\audacious-4.6.1-win32.exe
    "C:\Users\Admin\AppData\Local\Temp\audacious-4.6.1-win32.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:5640

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        audacious.exe

        • Path C:\Program Files (x86)\Audacious\bin\audacious.exe
        • Size 185KB
        • SHA256 e7644bbbca0879a68f9c3c0aa8a379f6c7bfe82178321ae259943ae84ccb46b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        monoster.png

        • Path C:\Program Files (x86)\Audacious\share\audacious\Skins\TinyPlayer\monoster.png
        • Size 241B
        • SHA256 fe57f800552a22b8b71d4266663a57f60f59bd17f25f1205e07d7a968b48039c
        • MD5 SHA1 SHA512 TLSH

        nums_ex.png

        • Path C:\Program Files (x86)\Audacious\share\audacious\Skins\TinyPlayer\nums_ex.png
        • Size 212B
        • SHA256 73e4e6bf15e4291f01c411ea7e69232e4ce66091db24d1f47a47c685eccd156f
        • MD5 SHA1 SHA512 TLSH

        playpaus.png

        • Path C:\Program Files (x86)\Audacious\share\audacious\Skins\TinyPlayer\playpaus.png
        • Size 186B
        • SHA256 2a31995692b38cb0472d5238f42f3a7d08edafeea5f1c1145e0dacc16eb26153
        • MD5 SHA1 SHA512 TLSH

        pledit.txt

        • Path C:\Program Files (x86)\Audacious\share\audacious\Skins\TinyPlayer\pledit.txt
        • Size 95B
        • SHA256 0d989813af5e6cc41568f07753ebcba133be868f20586ba98bfd865979816b3d
        • MD5 SHA1 SHA512 TLSH

        text.png

        • Path C:\Program Files (x86)\Audacious\share\audacious\Skins\TinyPlayer\text.png
        • Size 410B
        • SHA256 0f14ee6b0c445a236568a6b94ffc9b3bec61123a591c6c81684d698f17d03ae8
        • MD5 SHA1 SHA512 TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\ca@valencia\LC_MESSAGES\gtk20.mo
        • Size 78KB
        • SHA256 4e1864eb2b17eaacdbfe2473500ff028edb778b3c7692b035b2df0616567337e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\fr\LC_MESSAGES\gtk20.mo
        • Size 58KB
        • SHA256 2b130f0f76ac1edae80ab43253bf7273a0b68cbaf1206c808894ef693a35e40d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        audacious-plugins.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\ko\LC_MESSAGES\audacious-plugins.mo
        • Size 88KB
        • SHA256 6687f20718e16d51b7372a2d1d03d1281506f45cbbfb5360da99ba5bceb86d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\nl\LC_MESSAGES\gtk20.mo
        • Size 55KB
        • SHA256 4142bd0bb1aad017a5c2a063c7e2d55426f5a3802d2f4aa2f952e6e77b7aa830
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\ro\LC_MESSAGES\gtk20.mo
        • Size 56KB
        • SHA256 ff439bc2cfbe303174bad29b2b1ec75c6c0b4ef1db17861262e6146e55cb1d5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\ta\LC_MESSAGES\gtk20.mo
        • Size 106KB
        • SHA256 089a7835fd3f7fb2c18e385821c6059dfed41693a890c55bca8027d290930668
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gtk20.mo

        • Path C:\Program Files (x86)\Audacious\share\locale\vi\LC_MESSAGES\gtk20.mo
        • Size 79KB
        • SHA256 6819402993c87c8ecea20f3e5d0acf570fcd0a48f270b47946df4563921f6ae1
        • MD5 SHA1 SHA512 SSDEEP TLSH