Overview
overview
10Static
static
10Release.zip
windows10-2004-x64
1Release.zip
windows11-ltsc_2024-x64
1Release/Ex...ns.txt
windows10-2004-x64
1Release/Ex...ns.txt
windows11-ltsc_2024-x64
1Release/Fl...IP.png
windows10-2004-x64
1Release/Fl...IP.png
windows11-ltsc_2024-x64
1Release/Fl...AL.png
windows10-2004-x64
1Release/Fl...AL.png
windows11-ltsc_2024-x64
1Release/Fl...KN.png
windows10-2004-x64
1Release/Fl...KN.png
windows11-ltsc_2024-x64
1Release/Fl...AN.png
windows10-2004-x64
1Release/Fl...AN.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Release/Fl...ey.png
windows10-2004-x64
1Release/Fl...ey.png
windows11-ltsc_2024-x64
1Release/Fl...ue.png
windows10-2004-x64
1Release/Fl...ue.png
windows11-ltsc_2024-x64
1Release/Fl...ry.png
windows10-2004-x64
1Release/Fl...ry.png
windows11-ltsc_2024-x64
1Release/Fl...OM.png
windows10-2004-x64
1Release/Fl...OM.png
windows11-ltsc_2024-x64
1Release/Fl...IS.png
windows10-2004-x64
1Release/Fl...IS.png
windows11-ltsc_2024-x64
1Release/Fl...ia.png
windows10-2004-x64
1Release/Fl...ia.png
windows11-ltsc_2024-x64
1Release/Fl...th.png
windows10-2004-x64
1Release/Fl...th.png
windows11-ltsc_2024-x64
1Release/Fl...nd.png
windows10-2004-x64
1Release/Fl...nd.png
windows11-ltsc_2024-x64
1Release/Fl...on.png
windows10-2004-x64
1Release/Fl...on.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
899s - max time network
389s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/06/2026, 03:58
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Release.zip
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Release/Extensions.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Release/Extensions.txt
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Release/Flags/FlagsBase/LOCALIP.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Release/Flags/FlagsBase/UKN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Release/Flags/FlagsBase/_ASEAN.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Release/Flags/FlagsBase/_African Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Release/Flags/FlagsBase/_Alderney.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Release/Flags/FlagsBase/_Arab League.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Release/Flags/FlagsBase/_Basque Country.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Release/Flags/FlagsBase/_CARICOM.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Release/Flags/FlagsBase/_CIS.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Release/Flags/FlagsBase/_Catalonia.png
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Release/Flags/FlagsBase/_Commonwealth.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Release/Flags/FlagsBase/_England.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Release/Flags/FlagsBase/_England.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Release/Flags/FlagsBase/_European Union.png
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
General
- Target Release/Flags/FlagsBase/UKN.png
- Size 2KB
- Sample260620-ejg4pset3x
- SHA256 ccf97cfd055e8b424f2fa7d3a1de718f1fe2c0ceef22000b92d0a9c5851adf7c
- MD5 9795be7cc2591750ff692f5798979119
- SHA1 0f8a09c71d967e25e66c7ce70a40ac9a793b0df4
- SHA512 9cc34de1d89c916fe7defd243067436257da92e3ebf329ff41bb8dcfa21480e440f3683221825bcd83f9e70d97b39cc266891ead0248cc69c59543a2215863cc
- TLSH T156514A16CE915AB6ED4424E6B57327EEC00624328B7B2FB0B0017569905E16CA21D6F7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4560 mspaint.exe 4560 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4560 mspaint.exe 4560 mspaint.exe 4560 mspaint.exe 4560 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Flags\FlagsBase\UKN.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4560
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4280