Analysis
- user interaction
yes - max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/05/2026, 03:50
Behavioral task
behavioral1
Sample
Project# 26-29 - Addendum #4.pdf
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Project# 26-29 - Addendum #4.pdf
Resource
win11-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
image001.png
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
image001.png
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target image001.png
- Size 23KB
- Sample260509-ed8pgady2n
- SHA256 b2bbf14e94d95916293eee3e58a784c8d679489501626e9f501c6114c7609f0e
- MD5 89d6e45b7eaf1450aca63b11c5a9fe0a
- SHA1 ff3751426d4bfbaa7cb4ed08e69801961d938c1a
- SHA512 7a4f355f4ecaf62c5885c5801b3fc35f7cdafced1f06a7bef33e8d4a20e13a2fc59c5357060db0e67cecda362f1e67b69dfe2bb6ac069b8e579e13d42db94729
- SSDEEP 384:rZ4IrFT8raC6qxmguImr/ulVmoQvy9YqxKZdmSUHz3Y+hevRQpWmt9mLokwW9DjS:VvFgrancQKlYUiKSGY+hDomZkwW9DjS
- TLSH T198B2F1D59C0B03EB7C4D0742DA5FD4793DA49B8F20E623875288FB0FE4982AC695064B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4728 mspaint.exe 4728 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4728 mspaint.exe 4728 mspaint.exe 4728 mspaint.exe 4728 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image001.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4728
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:6028