Overview
overview
7Static
static
3Burrow-Setup (2).exe
windows10-2004-x64
7Burrow-Setup (2).exe
windows11-ltsc_2024-x64
7locales/vi.pak
windows10-2004-x64
3locales/vi.pak
windows11-ltsc_2024-x64
3locales/zh-CN.pak
windows10-2004-x64
3locales/zh-CN.pak
windows11-ltsc_2024-x64
3locales/zh-TW.pak
windows10-2004-x64
3locales/zh-TW.pak
windows11-ltsc_2024-x64
3resources.pak
windows10-2004-x64
3resources.pak
windows11-ltsc_2024-x64
3resources/...on.png
windows10-2004-x64
1resources/...on.png
windows11-ltsc_2024-x64
1resources/app/boot.js
windows10-2004-x64
3resources/app/boot.js
windows11-ltsc_2024-x64
3resources/...d.json
windows10-2004-x64
3resources/...d.json
windows11-ltsc_2024-x64
3resources/...oad.js
windows10-2004-x64
3resources/...oad.js
windows11-ltsc_2024-x64
3resources/...ice.js
windows10-2004-x64
3resources/...ice.js
windows11-ltsc_2024-x64
3resources/...ord.js
windows10-2004-x64
3resources/...ord.js
windows11-ltsc_2024-x64
3resources/...ld.otf
windows10-2004-x64
7resources/...ld.otf
windows11-ltsc_2024-x64
3resources/...ar.otf
windows10-2004-x64
7resources/...ar.otf
windows11-ltsc_2024-x64
3resources/...oad.js
windows10-2004-x64
3resources/...oad.js
windows11-ltsc_2024-x64
3resources/...on.png
windows10-2004-x64
1resources/...on.png
windows11-ltsc_2024-x64
1resources/...x.html
windows10-2004-x64
3resources/...x.html
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/10/2026, 08:34
Static task
static1
Behavioral task
behavioral1
Sample
Burrow-Setup (2).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Burrow-Setup (2).exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
locales/vi.pak
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
locales/vi.pak
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
locales/zh-CN.pak
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
locales/zh-CN.pak
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
locales/zh-TW.pak
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
locales/zh-TW.pak
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
resources.pak
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
resources.pak
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
resources/app/ban-icon.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
resources/app/ban-icon.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
resources/app/boot.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
resources/app/boot.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
resources/app/build.json
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
resources/app/build.json
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
resources/app/captchaPreload.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
resources/app/captchaPreload.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
resources/app/device.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
resources/app/device.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
resources/app/discord.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
resources/app/discord.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
resources/app/fonts/CCDigitalDelivery-Bold.otf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
resources/app/fonts/CCDigitalDelivery-Bold.otf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
resources/app/fonts/CCDigitalDelivery-Regular.otf
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
resources/app/fonts/CCDigitalDelivery-Regular.otf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
resources/app/gamePreload.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
resources/app/gamePreload.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
resources/app/icon.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
resources/app/icon.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
resources/app/index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
resources/app/index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target resources/app/ban-icon.png
- Size 3KB
- Sample261027-kgla8sda86
- SHA256 fb0b4ae0ba05f9503c63880ce2869d1fee843d3726c6f55686178327fb0650dd
- MD5 cf1672e5dbf94515596619f6aacf638f
- SHA1 8c476c2a2206c54fb798088a6a35415e2de6d245
- SHA512 18f96516481a993c676caef71c7b66eda5de633f6c947c98992c73e43703a5591250f0768f6551ae24d728cf03466d56d6dd90dedfa0f583362f6e5597ab5fa6
- TLSH T1F3814AF6D5C1E36DCCD211324C594E0EC0B1AB07EE129188BF5ACECC186C07C56A2F9A
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1804 mspaint.exe 1804 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1804 mspaint.exe 1804 mspaint.exe 1804 mspaint.exe 1804 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\resources\app\ban-icon.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1804
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1796