Overview
overview
3Static
static
1Xternal Fi...60.zip
windows10-2004-x64
1Xternal Fi...60.zip
windows11-ltsc_2024-x64
1Xternal Fi...ignore
windows10-2004-x64
3Xternal Fi...ignore
windows11-ltsc_2024-x64
3Xternal Fi...CLA.md
windows10-2004-x64
3Xternal Fi...CLA.md
windows11-ltsc_2024-x64
3Xternal Fi...DE.ps1
windows10-2004-x64
3Xternal Fi...DE.ps1
windows11-ltsc_2024-x64
3Xternal Fi...ING.md
windows10-2004-x64
3Xternal Fi...ING.md
windows11-ltsc_2024-x64
3Xternal Fi...ICENSE
windows10-2004-x64
3Xternal Fi...ICENSE
windows11-ltsc_2024-x64
3Xternal Fi...in.ahk
windows10-2004-x64
3Xternal Fi...in.ahk
windows11-ltsc_2024-x64
3Xternal Fi...NOTICE
windows10-2004-x64
3Xternal Fi...NOTICE
windows11-ltsc_2024-x64
3Xternal Fi...DME.md
windows10-2004-x64
3Xternal Fi...DME.md
windows11-ltsc_2024-x64
3Xternal Fi...go.png
windows10-2004-x64
1Xternal Fi...go.png
windows11-ltsc_2024-x64
1Xternal Fi...ro.png
windows10-2004-x64
1Xternal Fi...ro.png
windows11-ltsc_2024-x64
1Xternal Fi...ck.png
windows10-2004-x64
1Xternal Fi...ck.png
windows11-ltsc_2024-x64
1Xternal Fi...er.ahk
windows10-2004-x64
3Xternal Fi...er.ahk
windows11-ltsc_2024-x64
3Xternal Fi...er.ahk
windows10-2004-x64
3Xternal Fi...er.ahk
windows11-ltsc_2024-x64
3Xternal Fi...nc.ahk
windows10-2004-x64
3Xternal Fi...nc.ahk
windows11-ltsc_2024-x64
3Xternal Fi...ON.ahk
windows10-2004-x64
3Xternal Fi...ON.ahk
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 00:00
Static task
static1
Behavioral task
behavioral1
Sample
Xternal Fisch Macro V0.2.60.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Xternal Fisch Macro V0.2.60.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Xternal Fisch Macro V0.2.60/.gitignore
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Xternal Fisch Macro V0.2.60/.gitignore
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Xternal Fisch Macro V0.2.60/CLA.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Xternal Fisch Macro V0.2.60/CLA.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Xternal Fisch Macro V0.2.60/CLAUDE.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Xternal Fisch Macro V0.2.60/CLAUDE.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Xternal Fisch Macro V0.2.60/CONTRIBUTING.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Xternal Fisch Macro V0.2.60/CONTRIBUTING.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Xternal Fisch Macro V0.2.60/LICENSE
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Xternal Fisch Macro V0.2.60/LICENSE
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Xternal Fisch Macro V0.2.60/Main.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Xternal Fisch Macro V0.2.60/Main.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Xternal Fisch Macro V0.2.60/NOTICE
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Xternal Fisch Macro V0.2.60/NOTICE
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Xternal Fisch Macro V0.2.60/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Xternal Fisch Macro V0.2.60/README.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Xternal Fisch Macro V0.2.60/images/DiscordLogo.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Xternal Fisch Macro V0.2.60/images/DiscordLogo.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacro.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacro.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacroBlack.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacroBlack.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Xternal Fisch Macro V0.2.60/library/Discord/DiscordBuilder.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Xternal Fisch Macro V0.2.60/library/Discord/DiscordBuilder.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Xternal Fisch Macro V0.2.60/library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Xternal Fisch Macro V0.2.60/library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Xternal Fisch Macro V0.2.60/library/DownloadAsync.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Xternal Fisch Macro V0.2.60/library/DownloadAsync.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Xternal Fisch Macro V0.2.60/library/JSON.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Xternal Fisch Macro V0.2.60/library/JSON.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target Xternal Fisch Macro V0.2.60/images/DiscordLogo.png
- Size 112KB
- Sample261102-aah77a1v4m
- SHA256 51388fa374938017e4cb818fd9a7acd6de68b1d56798986545d2e49cfabf8176
- MD5 7fc7ac037b60a97abb7cc57eab9c02b0
- SHA1 417b4d3f6b9844dc4d560e29bb7bc0c998f0e916
- SHA512 91f0f7a2211dede51f52df120cf5c06047ee403e8aa57de9015763428c4dca81bfc04aa6aa16f1c5e775387aad16278e8d46bd2613c0806716d145fb624f810a
- SSDEEP 1536:emUfSLe7SOzuhPkVm4vxCwjb/1EDlRJmhH4YSM9z4H2lXyJ4H:jUqLe7aP6mendEkhYYIWlimH
- TLSH T1A5B37BA8DD031CA7FE4040B6899B0F64FB910971C862A7074374F22D6D8B75B7F4B9A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2108 mspaint.exe 2108 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2108 mspaint.exe 2108 mspaint.exe 2108 mspaint.exe 2108 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Xternal Fisch Macro V0.2.60\images\DiscordLogo.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2108
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5400