Analysis
-
max time kernel
89s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
24/12/2022, 19:07
General
-
Target
10 to XP Remake/Build In Windows XP Apps/mspaint.exe
-
Size
335KB
-
MD5
949bc05cef66bcd68eb23f08eb4c2dff
-
SHA1
b3af3c83b5b1d0f382ee469ac96e8ecbc3a21be5
-
SHA256
4a8b0fd56eef260471a1284161ecbba3bb0cdd8b240b932a94b85077ae8c2f43
-
SHA512
f671fffa172940157d331c4a1d83d1f530abb67642becc5722f5a0d80e75291e9e457a6a39f22b301a1d65f4dce86a34b625a25ab48230634c39ac9f3eacdb5e
-
SSDEEP
6144:m4RREcMZ5vVCiiKrao9afJu3YYtWGaVoRiS6hxH5AgyOv:nbuvVCiisao9Ii3aViKHB
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\10 to XP Remake\Build In Windows XP Apps\mspaint.exe"C:\Users\Admin\AppData\Local\Temp\10 to XP Remake\Build In Windows XP Apps\mspaint.exe"1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵