Overview
overview
3Static
static
3cREATIVE 2.rar
windows10-2004-x64
1cREATIVE 2.rar
windows11-21h2-x64
1cREATIVE 2...gs.exe
windows10-2004-x64
1cREATIVE 2...gs.exe
windows11-21h2-x64
1cREATIVE 2...64.dll
windows10-2004-x64
1cREATIVE 2...64.dll
windows11-21h2-x64
1cREATIVE 2/a.png
windows10-2004-x64
1cREATIVE 2/a.png
windows11-21h2-x64
cREATIVE 2/c.png
windows10-2004-x64
1cREATIVE 2/c.png
windows11-21h2-x64
Analysis
- max time kernel
59s - max time network
62s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 15:36
Static task
static1
Behavioral task
behavioral1
Sample
cREATIVE 2.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
cREATIVE 2.rar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
cREATIVE 2/Creative EAX Settings.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
cREATIVE 2/Creative EAX Settings.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
cREATIVE 2/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
cREATIVE 2/VoicemeeterRemote64.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
cREATIVE 2/a.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
cREATIVE 2/a.png
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
cREATIVE 2/c.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
cREATIVE 2/c.png
Resource
win11-20260513-en
General
- Target cREATIVE 2/a.png
- Size 1.6MB
- Sample260601-s2chtsay5k
- SHA256 a96d2b4ad6c42d384484aee807b6c8da8bce0c8d376497a0961f643f19c9d42e
- MD5 b15323fdad4075e4e42498318f319498
- SHA1 70dfa8e651295859bab83f9ed5e2191e254851a8
- SHA512 12c91b2bcf12037b1d0b277eb3dd0fffdf5c40ead02820db85a95184ebacd8b5241a291a6857f4cbafe05774cfb7996b577e672073a12ad697c1b83dba38a1e4
- SSDEEP 49152:3FMU7NLK8hkqwKPSKplYwrMg04M8sDlJr:eWLKokqwKPLpq5gAVfr
- TLSH T1858533FE3406CF209A711D06D82C7F4506B2A3FAD06F2EA410FDF60B2BEE2B55695945
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2280 mspaint.exe 2280 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2280 mspaint.exe 2280 mspaint.exe 2280 mspaint.exe 2280 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\cREATIVE 2\a.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2280
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3756