Overview
overview
8Static
static
3Astolfo.jar
windows10-2004-x64
1Astolfo.jar
windows11-ltsc_2024-x64
8libs.jar
windows10-2004-x64
1libs.jar
windows11-ltsc_2024-x64
1natives/Mu...nk.dll
windows10-2004-x64
1natives/Mu...nk.dll
windows11-ltsc_2024-x64
1natives/OpenAL32.dll
windows10-2004-x64
3natives/OpenAL32.dll
windows11-ltsc_2024-x64
3natives/OpenAL64.dll
windows10-2004-x64
1natives/OpenAL64.dll
windows11-ltsc_2024-x64
1natives/gr...64.dll
windows10-2004-x64
1natives/gr...64.dll
windows11-ltsc_2024-x64
1natives/ji...x8.dll
windows10-2004-x64
3natives/ji...x8.dll
windows11-ltsc_2024-x64
3natives/ji...64.dll
windows10-2004-x64
1natives/ji...64.dll
windows11-ltsc_2024-x64
8natives/ji...aw.dll
windows10-2004-x64
3natives/ji...aw.dll
windows11-ltsc_2024-x64
3natives/ji...64.dll
windows10-2004-x64
1natives/ji...64.dll
windows11-ltsc_2024-x64
1natives/ji...ab.dll
windows10-2004-x64
3natives/ji...ab.dll
windows11-ltsc_2024-x64
3natives/jn...ch.dll
windows10-2004-x64
1natives/jn...ch.dll
windows11-ltsc_2024-x64
8natives/jn....4.dll
windows10-2004-x64
1natives/jn....4.dll
windows11-ltsc_2024-x64
1natives/li...32.dll
windows10-2004-x64
3natives/li...32.dll
windows11-ltsc_2024-x64
3natives/li...tv.dll
windows10-2004-x64
3natives/li...tv.dll
windows11-ltsc_2024-x64
3natives/lwjgl.dll
windows10-2004-x64
3natives/lwjgl.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
899s - max time network
478s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 16:57
Static task
static1
Behavioral task
behavioral1
Sample
Astolfo.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Astolfo.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
libs.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
libs.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
natives/MumbleLink.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
natives/MumbleLink.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
natives/OpenAL32.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
natives/OpenAL32.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
natives/OpenAL64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
natives/OpenAL64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
natives/graphics-hook64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
natives/graphics-hook64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
natives/jinput-dx8.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
natives/jinput-dx8.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
natives/jinput-dx8_64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
natives/jinput-dx8_64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
natives/jinput-raw.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
natives/jinput-raw.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
natives/jinput-raw_64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
natives/jinput-raw_64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
natives/jinput-wintab.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
natives/jinput-wintab.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
natives/jnidispatch.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
natives/jnidispatch.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
natives/jnidispatch_jna4.4.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
natives/jnidispatch_jna4.4.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
natives/libmfxsw32.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
natives/libmfxsw32.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
natives/libmp3lame-ttv.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
natives/libmp3lame-ttv.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
natives/lwjgl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
natives/lwjgl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
General
- Target natives/graphics-hook64.dll
- Size 223KB
- Sample261107-vgnfpsev2r
- SHA256 3b1e7e8e1c784a21c63e411aee5bd117c52c7dcb6a0413eb16ac2dbca62b591c
- MD5 0876864e98d48d2bb64246247f170fd0
- SHA1 451501cf03aa8b27c6f81b76bddee4cfb3a3d295
- SHA512 3b65c213499d9d738bdd575f01359a918d7d64dd45e3cd158140c386b0f5472acde184d6563292d9d24980d7cf0b0ac2f505350f740bc92db6695f1b8c40e9bb
- SSDEEP 3072:8cat0IvtZ5ySXGv7sAoBEFqqjiFTAeOk9ABicBgtBM+JIUw0v3StAtWs:8cW0IvtZ5yN7s5BoCDA0ckBM+U65
- TLSH T111246C4572B508B5ED3BC279D893A115DA7238600BB0C6EF572402A9DF2B3E1F53EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\natives\graphics-hook64.dll,#11⤵PID:1092
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5124
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:1628