aa08c542e77b045fa1e00d4feab21080ceb415c4b6c343b0dbc5704d1fb02f92 | Triage™

Login
Reports

Overview

overview

Static

static

3

Debug/EAX Console.exe

windows10-2004-x64

Debug/EAX Console.exe

windows11-ltsc_2024-x64

3

Debug/Guna.UI2.dll

windows10-2004-x64

1

Debug/Guna.UI2.dll

windows11-ltsc_2024-x64

1

Debug/Mela...di.dll

windows10-2004-x64

1

Debug/Mela...di.dll

windows11-ltsc_2024-x64

1

Debug/Mela...32.dll

windows10-2004-x64

3

Debug/Mela...32.dll

windows11-ltsc_2024-x64

3

Debug/Mela...64.dll

windows10-2004-x64

1

Debug/Mela...64.dll

windows11-ltsc_2024-x64

1

Debug/Mela....dylib

macos-10.15-amd64

1

Debug/Voic...te.dll

windows10-2004-x64

3

Debug/Voic...te.dll

windows11-ltsc_2024-x64

3

Debug/Voic...64.dll

windows10-2004-x64

1

Debug/Voic...64.dll

windows11-ltsc_2024-x64

1

Analysis

user interaction
yes
max time kernel
69s
max time network
128s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
04/11/2026, 07:25

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Debug/EAX Console.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

37 signatures

150 seconds

defense_evasion discovery execution neptunerat umbral persistence privilege_escalation spyware stealer trojan

Behavioral task

behavioral2

Sample

Debug/EAX Console.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Debug/Guna.UI2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Debug/Guna.UI2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Debug/Melanchall.DryWetMidi.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Debug/Melanchall.DryWetMidi.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Debug/Melanchall_DryWetMidi_Native32.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Debug/Melanchall_DryWetMidi_Native32.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

Debug/Melanchall_DryWetMidi_Native64.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Debug/Melanchall_DryWetMidi_Native64.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Debug/Melanchall_DryWetMidi_Native64.dylib

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Debug/VoicemeeterRemote.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Debug/VoicemeeterRemote.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Debug/VoicemeeterRemote64.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Debug/VoicemeeterRemote64.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Debug/Melanchall_DryWetMidi_Native64.dylib
Size 88KB
Sample261104-h9em2sty4p
SHA256 aa08c542e77b045fa1e00d4feab21080ceb415c4b6c343b0dbc5704d1fb02f92
MD5 a51c6118f789a4f373ab25d98fab2988
SHA1 80eafcd0d5806bb6bc40600d418206b78f4240a4
SHA512 333a70512c919ec4119e9ce30364ad5380655f9105c60fdde4a29de600d54985bee73b02f498cd9a90d0ded58d9ea4d9eb1ba76f1879b595760d6b5174b2f647
SSDEEP 384:OwUiZX3J6yvvnVDytNa2ZHS60LuoM5W/pFA6Uxf9pVtjN/gDtgd/OC5zgtDH23Zh:Owd3CBUuL5WafVQ99W3PQdLj0
TLSH
T14E93F9E36BC8561CC58B62B4C85101E2F435F81613E6461EF3DCAFA5EC197C82646EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib\""
1⤵
PID:467

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib\""
1⤵
PID:467

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib
1⤵
PID:467
- /bin/zsh
  /bin/zsh -c /Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib
  2⤵
  PID:468
- /Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib
  /Users/run/Debug/Melanchall_DryWetMidi_Native64.dylib
  2⤵
  PID:468

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.systemsoundserverd
1⤵
PID:494

/usr/sbin/systemsoundserverd
/usr/sbin/systemsoundserverd
1⤵
PID:494

/usr/libexec/xpcproxy
xpcproxy com.apple.audio.AudioComponentRegistrar
1⤵
PID:495

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar
/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon
1⤵
PID:495

/usr/libexec/xpcproxy
xpcproxy com.apple.nsurlstoraged
1⤵
PID:507

/usr/libexec/nsurlstoraged
/usr/libexec/nsurlstoraged --privileged
1⤵
PID:507

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy