Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/06/2026, 22:31
Static task
static1
Behavioral task
behavioral1
Sample
9ed0a92e-453b-4bba-a0b2-5afe2a003096.png
Resource
win10ltsc2021-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ed0a92e-453b-4bba-a0b2-5afe2a003096.png
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target 9ed0a92e-453b-4bba-a0b2-5afe2a003096.png
- Size 2.1MB
- Sample260624-2fgebsf18p
- SHA256 54b09805916cf8100ffaadfe1c036d86cd84743bd2a9422fb498ae7c13ba1935
- MD5 07f70fa68f470930a90c5a2e442d3343
- SHA1 f6666170c624a20550106f726541afc6216c1d0e
- SHA512 958b40c201f147b04febcb4867d09bbfffe18f7fe5fc90c9e31d0775ae732ebe2924af9048ddd814222cf372210e2d47ce7d28904139a1fb5c1dce5eecb1d37a
- SSDEEP 49152:r3+TNkapiNy0DTuC4euWgCDUu686S3y0ZG4gG3j7:KkM+RDTXBD/Au6Lo7ZGXA
- TLSH T1C8A533765654C4C7EC1E3DFA50B036B04A6E5A429E7726C3C0B72C54A3CCF7D5AAAB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2860 mspaint.exe 2860 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2860 mspaint.exe 2860 mspaint.exe 2860 mspaint.exe 2860 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\9ed0a92e-453b-4bba-a0b2-5afe2a003096.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2860
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5924