Analysis
-
max time kernel
7s -
max time network
4s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250217-fr -
resource tags
-
submitted
20/02/2025, 09:15
General
-
Target
Capture d’écran 2024-11-22 155137.png
-
Size
43KB
-
MD5
1786b6245aec7ed4d3553c0358cb5569
-
SHA1
5540f8d110663f29c3706423fccfba798e0a58b5
-
SHA256
f0854186d24200fe697aaa20459a7eb8263734998c79e46f7c91c96e81ec0ee5
-
SHA512
5a16b08121567f0c7049b225c75dcf08c2c3e94ac55eafe6a8c3f2c969c4d6f8b07fb2d2df5c06e81d2fec77f1906dc85a11d999b518c25fb6405b5822ad7c66
-
SSDEEP
768:ZJYDvtUYcxovnLjceXKbIWenuCYEGsOSNxOsgJhYQHOhFAdOAmRPusawWu:ZJEUpxovnLoeXKjNCYEGlnJGQHrdOAmd
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Capture d’écran 2024-11-22 155137.png"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵