Overview
overview
10Static
static
10Release.zip
windows10-2004-x64
1Release.zip
windows11-ltsc_2024-x64
1Release/Ex...ns.txt
windows10-2004-x64
1Release/Ex...ns.txt
windows11-ltsc_2024-x64
1Release/Fl...IP.png
windows10-2004-x64
1Release/Fl...IP.png
windows11-ltsc_2024-x64
1Release/Fl...AL.png
windows10-2004-x64
1Release/Fl...AL.png
windows11-ltsc_2024-x64
1Release/Fl...KN.png
windows10-2004-x64
1Release/Fl...KN.png
windows11-ltsc_2024-x64
1Release/Fl...AN.png
windows10-2004-x64
1Release/Fl...AN.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Release/Fl...ey.png
windows10-2004-x64
1Release/Fl...ey.png
windows11-ltsc_2024-x64
1Release/Fl...ue.png
windows10-2004-x64
1Release/Fl...ue.png
windows11-ltsc_2024-x64
1Release/Fl...ry.png
windows10-2004-x64
1Release/Fl...ry.png
windows11-ltsc_2024-x64
1Release/Fl...OM.png
windows10-2004-x64
1Release/Fl...OM.png
windows11-ltsc_2024-x64
1Release/Fl...IS.png
windows10-2004-x64
1Release/Fl...IS.png
windows11-ltsc_2024-x64
1Release/Fl...ia.png
windows10-2004-x64
1Release/Fl...ia.png
windows11-ltsc_2024-x64
1Release/Fl...th.png
windows10-2004-x64
1Release/Fl...th.png
windows11-ltsc_2024-x64
1Release/Fl...nd.png
windows10-2004-x64
1Release/Fl...nd.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
898s - max time network
439s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/06/2026, 03:58
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Release.zip
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Release/Extensions.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Release/Extensions.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Release/Flags/FlagsBase/_England.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Release/Flags/FlagsBase/_England.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
General
- Target Release/Flags/FlagsBase/_Alderney.png
- Size 2KB
- Sample260620-ejg4pset3x
- SHA256 a648200eb724895de1034ab7a3b82394c391576adcfbc2bd75911b343afe2f26
- MD5 fc4033ebb25958a3bb219e1ba08877e5
- SHA1 d7cc0f80e046ff4bc557004829c5588623bb0950
- SHA512 f8874a0de0da93018e9fc051a2976d88550d59ec3c06c9e162c8c681b09d5a10fd64ae6779b0c21f0025f42294e27a9cc73b993b86287af619e2af9f20ffad14
- TLSH T1C941C70DFD61A102C088A7395AE3501799DB8AC0EBCD906DBD8C84175B391F7982FADB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2136 mspaint.exe 2136 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2136 mspaint.exe 2136 mspaint.exe 2136 mspaint.exe 2136 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Flags\FlagsBase\_Alderney.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2136
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3012