Overview

overview

4

Static

static

1

dyv.png

windows10-2004-x64

4

dyv.png

windows10-ltsc 2021-x64

4

Resubmissions

29-01-2025 20:35

250129-zc5awaxngm 4

06-11-2024 03:37

241106-d6jqdatjhv 10

Analysis

  • max time kernel
    92s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-01-2025 20:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dyv.png

  • Size

    1.8MB

  • MD5

    11b7bbb67f673539b5a2c0f2962e3a80

  • SHA1

    7049f78608ddf8fcfedbf24724bcaf92794866f3

  • SHA256

    ec21bc5f665662e4492b99aaae389f5a132619ef73631118b6e2d3a3a231e275

  • SHA512

    c21d38a50fd8e4bec8027c6bd103d81b354afd2c1e1fdc581d016a40eaf9ffa879d50a39361dd36a8bf0197685161173b154c7902e8e861bb835bbbd79ba0b87

  • SSDEEP

    49152:oJkPBnd7Ez7fqZxqjbfb66iezYy/0eSOYseXW58n5:oJEEz7QxqjbOnezYy/ZVYXW58n5

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Windows\system32\mspaint.exe
    "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\dyv.png"
    1⤵
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3492
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
      PID:3584

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads