Analysis
- max time kernel
121s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20250314-en - resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system - submitted
24/04/2025, 14:53
Static task
static1
Behavioral task
behavioral1
Sample
45.27.241.188.zip
Resource
win10v2004-20250314-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
45.27.241.188.zip
Resource
win11-20250410-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
2025 - PASSWORD.png
Resource
win10v2004-20250314-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
2025 - PASSWORD.png
Resource
win11-20250411-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Free_Apps_v3.4.7z
Resource
win10v2004-20250314-en
24 signatures
150 seconds
Behavioral task
behavioral6
Sample
Free_Apps_v3.4.7z
Resource
win11-20250410-en
2 signatures
150 seconds
General
- Target 2025 - PASSWORD.png
- Size 33KB
- Sample250424-r9rr2stycw
- SHA256 82b96451cb85681e845d1d147eb7a7c57b4f3b6ae0ef43930f9210d67f0430b8
- MD5 960555cb59374995ac8074a8bb2353d2
- SHA1 47f14dc0ebca52907424a668e1e200f59d4013a3
- SHA512 f92f83f43c9ab79fe85f0ccd6a7a5db43fb85b207fb72897a4f1764c8b66e43a5bf5894ba4eb6c7e6e1dc0d8d090edaab5f46f053787023eeac5d7f5b7d93222
- SSDEEP 768:8v02/IcWKeurm06RlGlzvT5t8HmmuvF6I:8v02QcWKeurYl23
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 760 mspaint.exe 760 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 760 mspaint.exe 760 mspaint.exe 760 mspaint.exe 760 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\2025 - PASSWORD.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:760
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4892