Analysis
- max time kernel
898s - max time network
440s - platform
windows10-2004_x64 - resource
win10v2004-20260513-es - resource tags
arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows - submitted
04/06/2026, 15:51
Static task
static1
Behavioral task
behavioral1
Sample
RE Numero de Ticket 654011.msg
Resource
win10v2004-20260513-es
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
RE Numero de Ticket 654011.msg
Resource
win11-20260513-es
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
image001.png
Resource
win10v2004-20260513-es
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
image001.png
Resource
win11-20260513-es
0 signatures
900 seconds
General
- Target image001.png
- Size 99KB
- Sample260604-tal4maay3m
- SHA256 01832c88766d0520a4117bbd738eda43ccbf7132f406397bf6d87bdd47b81f6b
- MD5 cb56cddbd955d258959825eecb196b07
- SHA1 b36623540f4e755d38e40b3be92ceb176fc2fdc6
- SHA512 e11c3ebacb5af254d96a927b6a73e55941d5a2e170386dfe2b004d7a29d23f082bc948d73ca09fd6ccad69e35dfba6bed375dc290e06e7e0f549029f112cba87
- SSDEEP 3072:Fgnxbu5DCV/knRA7alcf3VHDCed+nmp40BFG:ehj/knQ+AHeedgmp4OG
- TLSH T1EDA3F146F931E0AEDDCF51BACD470FC3B6A3907ACED8950EE800664E4646F647689B70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3604 mspaint.exe 3604 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3604 mspaint.exe 3604 mspaint.exe 3604 mspaint.exe 3604 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image001.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3604
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4736