Overview
overview
10Static
static
10Release.zip
windows10-2004-x64
1Release.zip
windows11-ltsc_2024-x64
1Release/Ex...ns.txt
windows10-2004-x64
1Release/Ex...ns.txt
windows11-ltsc_2024-x64
1Release/Fl...IP.png
windows10-2004-x64
1Release/Fl...IP.png
windows11-ltsc_2024-x64
1Release/Fl...AL.png
windows10-2004-x64
1Release/Fl...AL.png
windows11-ltsc_2024-x64
1Release/Fl...KN.png
windows10-2004-x64
1Release/Fl...KN.png
windows11-ltsc_2024-x64
1Release/Fl...AN.png
windows10-2004-x64
1Release/Fl...AN.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Release/Fl...ey.png
windows10-2004-x64
1Release/Fl...ey.png
windows11-ltsc_2024-x64
1Release/Fl...ue.png
windows10-2004-x64
1Release/Fl...ue.png
windows11-ltsc_2024-x64
1Release/Fl...ry.png
windows10-2004-x64
1Release/Fl...ry.png
windows11-ltsc_2024-x64
1Release/Fl...OM.png
windows10-2004-x64
1Release/Fl...OM.png
windows11-ltsc_2024-x64
1Release/Fl...IS.png
windows10-2004-x64
1Release/Fl...IS.png
windows11-ltsc_2024-x64
1Release/Fl...ia.png
windows10-2004-x64
1Release/Fl...ia.png
windows11-ltsc_2024-x64
1Release/Fl...th.png
windows10-2004-x64
1Release/Fl...th.png
windows11-ltsc_2024-x64
1Release/Fl...nd.png
windows10-2004-x64
1Release/Fl...nd.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
50s - max time network
50s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/06/2026, 03:58
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Release.zip
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Release/Extensions.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Release/Extensions.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Release/Flags/FlagsBase/_England.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Release/Flags/FlagsBase/_England.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
General
- Target Release/Flags/FlagsBase/_African Union.png
- Size 1KB
- Sample260620-ejg4pset3x
- SHA256 e3315c233e63ccb502775078c05b12a6cc09731919089faa0f9ce67975f555df
- MD5 9bafe71137dfbe464edb5ea8f79ae3a6
- SHA1 321b65c1edc4a523ffebbc954fa918dcf55ba7a8
- SHA512 1b007077d275ab35bec4d0bee7c3c5ecf9d538185321f9aae60bea3d3200c9fa235df99e6b31c2aac8908257a660977fedd2113572007c25a9f2605932d61f0e
- TLSH T1C831E9C2A6A48C47B89810F19541443E0A7ACD14381F642C698F56A4B7BFE44C9E7AC9
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1640 mspaint.exe 1640 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1640 mspaint.exe 1640 mspaint.exe 1640 mspaint.exe 1640 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Flags\FlagsBase\_African Union.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1640
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3760