Resubmissions
15/04/2026, 12:18
260415-pgpqwadw8j315/04/2026, 12:17
260415-pf2daadw5n110/04/2026, 11:17
260410-nd6dsac14z110/04/2026, 11:01
260410-m4py2sat4m310/04/2026, 10:54
260410-mzrxvah19n326/03/2026, 11:25
260326-njm5dset6q3Analysis
- max time kernel
900s - max time network
561s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
15/04/2026, 12:17
General
- Target Screenshot 2026-03-26 12.25.24.png
- Size 684KB
- Sample260415-pf2daadw5n
- SHA256 895b861180eec634734f61c581a3fa22e25da11d33db9780d9a951d70b603c94
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-03-26 12.25.24.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2012-0-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-3-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-6-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-12-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-18-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-24-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-25-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-26-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-29-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-30-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-31-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-36-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-37-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-42-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-46-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-48-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-54-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-59-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-60-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-66-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-72-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-78-0x0000020D95220000-0x0000020D95575000-memory.dmp
memory/2012-84-0x0000020D95220000-0x0000020D95575000-memory.dmp