f003b78676033f05b220818287cea86fd5987cb20b186a570d229c8250330959

Resubmissions

13/11/2026, 02:57

261113-df1k7sez91

13/11/2026, 02:38

261113-c4yabaez2t7

Analysis

user interaction
yes
max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 02:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Capys-Free-AA-v0.1/AnimeAdventuresMacro.exe
Size 2.4MB
Sample261113-c4yabaez2t
SHA256 f003b78676033f05b220818287cea86fd5987cb20b186a570d229c8250330959
MD5 b421fa33c8f8222a68927ea6b0ec53e7
SHA1 394159f4975f45a423beeec3da4b633a3f38f4a6
SHA512 1b2a0f79a752e7be4be7cff24756bc242760afd8d3de2cec9e41c7aacf722d70647de6a275e19a96d83c54502b8cd25d2a5feecec7368e9f9a0d4f534f28d818
SSDEEP 49152:AWjxPR1vMq0SJw7Zx+wHk7VBGKxSE97XtYWEQ0Vd+paou/WfMoDryGX:AAMq0SmmXqK7pgQd
TLSH
T115C5E10373E6C1E8DA7781F5C9564623EB3174641B388ADB2560952EEFB3BD04E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1076	AutoHotkey.exe

Loads dropped DLL 1 IoCs

pid	Process
1076	AutoHotkey.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe
1076	AutoHotkey.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 1076	5016	AnimeAdventuresMacro.exe	89

C:\Users\Admin\AppData\Local\Temp\Capys-Free-AA-v0.1\AnimeAdventuresMacro.exe
"C:\Users\Admin\AppData\Local\Temp\Capys-Free-AA-v0.1\AnimeAdventuresMacro.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\c230af4f9cc323e42df8616eb4d6135698717053a019ffb60523f155b1a00075\AutoHotkey.exe
  "C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\c230af4f9cc323e42df8616eb4d6135698717053a019ffb60523f155b1a00075\AutoHotkey.exe" /ErrorStdOut /CP65001 *
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

PolicyCore.dll

Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\7b99cd06ab33ff84d5425718ff2d2494842aba5eab49dd39d43157ea53ca5d0e\PolicyCore.dll
Size 56KB
SHA256 7b99cd06ab33ff84d5425718ff2d2494842aba5eab49dd39d43157ea53ca5d0e
MD5 da75ff9e3f4b3f316f65899206e0541c
SHA1 141ef94753115f2aace7f5477661f8143518036a
SHA512 ee10ac89bf476ea5622fff479c45b2b16fcebd1a3d58eed6610bba44daf304893a8df0ac41fd95549f71de8e5d4b4dc479f75c52be3981ee38dab504774b2e8e
SSDEEP 1536:XG31IWTkT4aCNlK0e4/LZeIy31LpUq+BSxv0g:UTTkTEw0ZZeIy3nUq+8xv0
TLSH
T1E2437D0370514AA5C45280B0C85BAEFB89833D940B7046F72BF67A4D6FBA3D24BB7971
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoHotkey.exe

Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\c230af4f9cc323e42df8616eb4d6135698717053a019ffb60523f155b1a00075\AutoHotkey.exe
Size 1.2MB
SHA256 c230af4f9cc323e42df8616eb4d6135698717053a019ffb60523f155b1a00075
MD5 953c4db206b959539510ce87dd121794
SHA1 906551d4a8911a1bfa503c8fda05aa4339f1e339
SHA512 e9a5029bf2e1e6114046397b17d6e82a39590c550f972d6dadbad51185dc7511445542b289a019c9da389e2f7d0eca7fec85a65391a6d17ddb75e809e04f50a8
SSDEEP 24576:EEBoEnRTESXtBqkdEQ0oOd+pTM+EjUu1tWfWhgpDpXI:EE97XtYWEQ0Vd+paou/WfMoD
TLSH
T13355AF4773E7C1E8DA7BC1F9C9664223EB31B46417389ADB2590452EDF63AD00E3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Settings.ini.{005C5F92-860E-457C-B444-71BEF7FAA850}.tmp

Path C:\Users\Admin\AppData\Local\Temp\Capys-Free-AA-v0.1\Settings.ini.{005C5F92-860E-457C-B444-71BEF7FAA850}.tmp
Size 11KB
SHA256 16af9dc1cc56566e21e4876e30dcc441e843aecc9fe49b5c98e7f8bf090faca5
MD5 69b5c6bdb78bdefeb40a70b393ad58e3
SHA1 5593a0a42ab01771def475213afc1cf2e6664df4
SHA512 e5b0f18a2667c885e9d16f775da0e529997328daa8483f79ed40c3e30b7e67cfa3f1f36c8db52258af9069a679f85884a57b6e468b3cdefd245ff29b01ac0469
SSDEEP 192:Koi4VMyyG0HCP6TbvSBdlU4impby8W2oJtGOyv+pL7h+05RmUVO+OgOAyDkS9s9Z:KeVMyyG09QleRlBz8Krp3Z99hdo6ms
TLSH
T11E42259363FD1008FAB32B90BFB85075DAB7BD622A38D45D66D5500E0AF1E50C9627B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads