Overview
overview
3Static
static
1Xternal Fi...60.zip
windows10-2004-x64
1Xternal Fi...60.zip
windows11-ltsc_2024-x64
1Xternal Fi...ignore
windows10-2004-x64
3Xternal Fi...ignore
windows11-ltsc_2024-x64
3Xternal Fi...CLA.md
windows10-2004-x64
3Xternal Fi...CLA.md
windows11-ltsc_2024-x64
3Xternal Fi...DE.ps1
windows10-2004-x64
3Xternal Fi...DE.ps1
windows11-ltsc_2024-x64
3Xternal Fi...ING.md
windows10-2004-x64
3Xternal Fi...ING.md
windows11-ltsc_2024-x64
3Xternal Fi...ICENSE
windows10-2004-x64
3Xternal Fi...ICENSE
windows11-ltsc_2024-x64
3Xternal Fi...in.ahk
windows10-2004-x64
3Xternal Fi...in.ahk
windows11-ltsc_2024-x64
3Xternal Fi...NOTICE
windows10-2004-x64
3Xternal Fi...NOTICE
windows11-ltsc_2024-x64
3Xternal Fi...DME.md
windows10-2004-x64
3Xternal Fi...DME.md
windows11-ltsc_2024-x64
3Xternal Fi...go.png
windows10-2004-x64
1Xternal Fi...go.png
windows11-ltsc_2024-x64
1Xternal Fi...ro.png
windows10-2004-x64
1Xternal Fi...ro.png
windows11-ltsc_2024-x64
1Xternal Fi...ck.png
windows10-2004-x64
1Xternal Fi...ck.png
windows11-ltsc_2024-x64
1Xternal Fi...er.ahk
windows10-2004-x64
3Xternal Fi...er.ahk
windows11-ltsc_2024-x64
3Xternal Fi...er.ahk
windows10-2004-x64
3Xternal Fi...er.ahk
windows11-ltsc_2024-x64
3Xternal Fi...nc.ahk
windows10-2004-x64
3Xternal Fi...nc.ahk
windows11-ltsc_2024-x64
3Xternal Fi...ON.ahk
windows10-2004-x64
3Xternal Fi...ON.ahk
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 00:00
Static task
static1
Behavioral task
behavioral1
Sample
Xternal Fisch Macro V0.2.60.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Xternal Fisch Macro V0.2.60.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Xternal Fisch Macro V0.2.60/.gitignore
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Xternal Fisch Macro V0.2.60/.gitignore
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Xternal Fisch Macro V0.2.60/CLA.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Xternal Fisch Macro V0.2.60/CLA.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Xternal Fisch Macro V0.2.60/CLAUDE.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Xternal Fisch Macro V0.2.60/CLAUDE.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Xternal Fisch Macro V0.2.60/CONTRIBUTING.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Xternal Fisch Macro V0.2.60/CONTRIBUTING.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Xternal Fisch Macro V0.2.60/LICENSE
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Xternal Fisch Macro V0.2.60/LICENSE
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Xternal Fisch Macro V0.2.60/Main.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Xternal Fisch Macro V0.2.60/Main.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Xternal Fisch Macro V0.2.60/NOTICE
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Xternal Fisch Macro V0.2.60/NOTICE
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Xternal Fisch Macro V0.2.60/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Xternal Fisch Macro V0.2.60/README.md
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Xternal Fisch Macro V0.2.60/images/DiscordLogo.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Xternal Fisch Macro V0.2.60/images/DiscordLogo.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacro.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacro.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacroBlack.png
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Xternal Fisch Macro V0.2.60/images/OpenMacroBlack.png
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Xternal Fisch Macro V0.2.60/library/Discord/DiscordBuilder.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Xternal Fisch Macro V0.2.60/library/Discord/DiscordBuilder.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Xternal Fisch Macro V0.2.60/library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Xternal Fisch Macro V0.2.60/library/DiscordBuilderAHK-0.0.1.1/DiscordBuilder.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Xternal Fisch Macro V0.2.60/library/DownloadAsync.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Xternal Fisch Macro V0.2.60/library/DownloadAsync.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Xternal Fisch Macro V0.2.60/library/JSON.ahk
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Xternal Fisch Macro V0.2.60/library/JSON.ahk
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target Xternal Fisch Macro V0.2.60/images/OpenMacroBlack.png
- Size 6KB
- Sample261102-aah77a1v4m
- SHA256 e7c3623c41b62e48718c11f1e833aa7b86d47e18e69ffc42b510f72b4ab9f55b
- MD5 ceec76c94c350ee46fa940890645984c
- SHA1 2aafc2184b921148dc6d21147f87185385e8aeb1
- SHA512 16e65b4b1c96a1c0a61edb34396ec52158620eed6cc2deb2ecd6fe9fb0615fa20d543292a1d3c672a2a451591abe3dd21d68a477553fbecdaa0dcd09cd0a25a7
- SSDEEP 192:USP6GT/wjEoNsLknyW+RGcIvTIqeJY3YW:TP6CwjEiyW+RGcI8LJY3YW
- TLSH T156E14B126152CCAAB5443FB70AF5D4CF5C4F68891D8C730FE0E1E6648A1A117C398D7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 812 mspaint.exe 812 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 812 mspaint.exe 812 mspaint.exe 812 mspaint.exe 812 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Xternal Fisch Macro V0.2.60\images\OpenMacroBlack.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:812
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2348