Analysis

  • max time kernel
    150s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 23:05

General

  • Target
    Capys-AA-Macro-v3.1/AnimeAdventuresMacro.exe
  • Size 2.3MB
  • Sample261029-22t8batwcv
  • SHA256 df6064d7bd4e1487f0272648eca703d21f33321ff2e2b2c0d731ed95ef940cf6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v3.1\AnimeAdventuresMacro.exe
    "C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v3.1\AnimeAdventuresMacro.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4764
    • C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe
      "C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe" /ErrorStdOut /CP65001 *
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:4224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        guides.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\1214cfb82772a3d996b22043d31fb61e4e6cca36d94cc83f115c9fa594f6461e\guides.css
        • Size 15KB
        • SHA256 1214cfb82772a3d996b22043d31fb61e4e6cca36d94cc83f115c9fa594f6461e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UpdateInstaller.ps1

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\36ce91bd37cf14f6f4970e19e92a2822cf5cd207ae74e1679e58d2f6bff58865\UpdateInstaller.ps1
        • Size 10KB
        • SHA256 36ce91bd37cf14f6f4970e19e92a2822cf5cd207ae74e1679e58d2f6bff58865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        runtime.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\5c57bc872d89143f50d1b3daee1a37dfcfdd2faf66229d6f3a69bc0e4766f69a\runtime.css
        • Size 71KB
        • SHA256 5c57bc872d89143f50d1b3daee1a37dfcfdd2faf66229d6f3a69bc0e4766f69a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sortable.js

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\6d0a831fc19b4bae851797ad3393157e861afb7862459c11226359b27e2c4337\sortable.js
        • Size 44KB
        • SHA256 6d0a831fc19b4bae851797ad3393157e861afb7862459c11226359b27e2c4337
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updater.js

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\719f28a2713e6c9faffc24b8bf1e8173fe24d794fc0e4c77796d93ac9aa072d0\updater.js
        • Size 3KB
        • SHA256 719f28a2713e6c9faffc24b8bf1e8173fe24d794fc0e4c77796d93ac9aa072d0
        • MD5 SHA1 SHA512 TLSH

        compact.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\8cff60c6b6bcebb26efeac5f94a600ac0974e65bfbeeee1f8cee1788417a1e94\compact.css
        • Size 4KB
        • SHA256 8cff60c6b6bcebb26efeac5f94a600ac0974e65bfbeeee1f8cee1788417a1e94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        style.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\8e264d03a151dc07ce61dd12d96fc88c424a198d4a6ef938689a470b67584618\style.css
        • Size 13KB
        • SHA256 8e264d03a151dc07ce61dd12d96fc88c424a198d4a6ef938689a470b67584618
        • MD5 SHA1 SHA512 SSDEEP TLSH

        runtime.js

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\995c88171289e74bb56289d38ee213cc0a387d45156fca23ed43b9d557891573\runtime.js
        • Size 156KB
        • SHA256 995c88171289e74bb56289d38ee213cc0a387d45156fca23ed43b9d557891573
        • MD5 SHA1 SHA512 SSDEEP TLSH

        guides.js

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\ab379840f4048a32df466d81c06605cb8d48b228d58afd82df4b8bc9eea19724\guides.js
        • Size 23KB
        • SHA256 ab379840f4048a32df466d81c06605cb8d48b228d58afd82df4b8bc9eea19724
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updater.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\b1a9d0e085603e8258235d13a2a3402aa2bcca62337f7edb54a4723f6b7cfa67\updater.css
        • Size 2KB
        • SHA256 b1a9d0e085603e8258235d13a2a3402aa2bcca62337f7edb54a4723f6b7cfa67
        • MD5 SHA1 SHA512 TLSH

        aa.css

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\b8fc26613631a74f53b0f4f0e38028df4fcb767433558df22936d85a48a0350c\aa.css
        • Size 90KB
        • SHA256 b8fc26613631a74f53b0f4f0e38028df4fcb767433558df22936d85a48a0350c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.html

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\d4f673425aed7b3137f7659cd3e2022a39f1778c9b06dce4f70302e933441191\index.html
        • Size 15KB
        • SHA256 d4f673425aed7b3137f7659cd3e2022a39f1778c9b06dce4f70302e933441191
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lucide.js

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\f828bf34002c03a37da4acecfd0cf214935c4c6c26d4bc48903457ba6c44e606\lucide.js
        • Size 435KB
        • SHA256 f828bf34002c03a37da4acecfd0cf214935c4c6c26d4bc48903457ba6c44e606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AutoHotkey.exe

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe
        • Size 1.2MB
        • SHA256 2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PolicyCore.dll

        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\5ce4562ebace78aef4f195cbe1f3cc535ec7f39ff13f06d4fd917388d111f4d9\PolicyCore.dll
        • Size 55KB
        • SHA256 5ce4562ebace78aef4f195cbe1f3cc535ec7f39ff13f06d4fd917388d111f4d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        assets.json

        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\UI\df6064d7bd4e1487f0272648eca703d21f33321ff2e2b2c0d731ed95ef940cf6\assets.json
        • Size 2KB
        • SHA256 e2d7f755b8701b03bf492ceb144ae21cc51d223d997be4f07c8c20b90aa6bcb1
        • MD5 SHA1 SHA512 TLSH

        Settings.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v3.1\Settings.ini
        • Size 4KB
        • SHA256 d0e72764c6a5e0d337340ba4a64972facf144a1f978eb668df237666ecb28123
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Settings.ini

        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v3.1\Settings.ini
        • Size 5KB
        • SHA256 b8436e3ea15ec194a78445f0830ca88a374807381f7845ae47b6878fdeadc7b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PlanetGreenieStory.txt

        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v3.1\Settings\Configs\Story\PlanetGreenieStory.txt
        • Size 736B
        • SHA256 3b04de6ab121507664eec2ae0b3f22374e1436d0271481ef217cbaaced0b2803
        • MD5 SHA1 SHA512 TLSH

        memory/4224-124-0x00000000039D0000-0x00000000049A0000-memory.dmp