Overview
overview
10Static
static
10Release.zip
windows10-2004-x64
1Release.zip
windows11-ltsc_2024-x64
1Release/Ex...ns.txt
windows10-2004-x64
1Release/Ex...ns.txt
windows11-ltsc_2024-x64
1Release/Fl...IP.png
windows10-2004-x64
1Release/Fl...IP.png
windows11-ltsc_2024-x64
1Release/Fl...AL.png
windows10-2004-x64
1Release/Fl...AL.png
windows11-ltsc_2024-x64
1Release/Fl...KN.png
windows10-2004-x64
1Release/Fl...KN.png
windows11-ltsc_2024-x64
1Release/Fl...AN.png
windows10-2004-x64
1Release/Fl...AN.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Release/Fl...ey.png
windows10-2004-x64
1Release/Fl...ey.png
windows11-ltsc_2024-x64
1Release/Fl...ue.png
windows10-2004-x64
1Release/Fl...ue.png
windows11-ltsc_2024-x64
1Release/Fl...ry.png
windows10-2004-x64
1Release/Fl...ry.png
windows11-ltsc_2024-x64
1Release/Fl...OM.png
windows10-2004-x64
1Release/Fl...OM.png
windows11-ltsc_2024-x64
1Release/Fl...IS.png
windows10-2004-x64
1Release/Fl...IS.png
windows11-ltsc_2024-x64
1Release/Fl...ia.png
windows10-2004-x64
1Release/Fl...ia.png
windows11-ltsc_2024-x64
1Release/Fl...th.png
windows10-2004-x64
1Release/Fl...th.png
windows11-ltsc_2024-x64
1Release/Fl...nd.png
windows10-2004-x64
1Release/Fl...nd.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
900s - max time network
430s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/06/2026, 03:58
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Release.zip
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Release/Extensions.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Release/Extensions.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Release/Flags/FlagsBase/_England.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Release/Flags/FlagsBase/_England.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
General
- Target Release/Flags/FlagsBase/_Catalonia.png
- Size 623B
- Sample260620-ejg4pset3x
- SHA256 72e94ff03355fcf32ced8c941915d5f8c236aa6b2960bcbb92adc2dece017ca0
- MD5 2c0e6b7f731cd3b82fc3be6cc0a0b89d
- SHA1 51c1b7b11d94a161dd8fc1e38a4516a6f9521877
- SHA512 772b92cc7094e21114e30ac521487cc314a48707990cd6cecc31a5e6192b4d6b3c1963da460d1e8a49d66627353df439948c013ad8577515fb6acb35df969274
- TLSH T10DF002C72D05D926D6E2E2525A04D014BA7F8FFEDB38211C8DC5882B7BE48124FC5946
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4352 mspaint.exe 4352 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4352 mspaint.exe 4352 mspaint.exe 4352 mspaint.exe 4352 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Flags\FlagsBase\_Catalonia.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4352
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2680