Overview
overview
1Static
static
11 (119).jpg
windows10-2004-x64
11 (12).jpg
windows10-2004-x64
11 (12).png
windows10-2004-x64
11 (120).jpg
windows10-2004-x64
11 (121).jpg
windows10-2004-x64
11 (122).jpg
windows10-2004-x64
11 (123).jpg
windows10-2004-x64
11 (124).jpg
windows10-2004-x64
11 (125).jpg
windows10-2004-x64
11 (126).jpg
windows10-2004-x64
11 (127).jpg
windows10-2004-x64
11 (128).jpg
windows10-2004-x64
11 (129).jpg
windows10-2004-x64
11 (13).jpg
windows10-2004-x64
11 (13).png
windows10-2004-x64
11 (130).jpg
windows10-2004-x64
11 (131).jpg
windows10-2004-x64
11 (132).jpg
windows10-2004-x64
11 (133).jpg
windows10-2004-x64
11 (14).jpg
windows10-2004-x64
11 (14).png
windows10-2004-x64
11 (15).jpg
windows10-2004-x64
11 (15).png
windows10-2004-x64
11 (16).jpg
windows10-2004-x64
11 (16).png
windows10-2004-x64
11 (17).jpg
windows10-2004-x64
11 (17).png
windows10-2004-x64
11 (18).jpg
windows10-2004-x64
11 (18).jpg
windows10-2004-x64
11 (19).jpg
windows10-2004-x64
11 (19).jpg
windows10-2004-x64
11 (2).jpg
windows10-2004-x64
1Resubmissions
05/07/2026, 12:44
260705-pywkraf19n105/07/2026, 12:42
260705-pxgp7sf19k105/07/2026, 12:40
260705-pwffraf18m105/07/2026, 12:11
260705-pc3f6sct2w1Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/07/2026, 12:44
Static task
static1
Behavioral task
behavioral1
Sample
1 (119).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
1 (12).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
1 (12).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
1 (120).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
1 (121).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
1 (122).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
1 (123).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
1 (124).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
1 (125).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
1 (126).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
1 (127).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
1 (128).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
1 (129).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
1 (13).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
1 (13).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
1 (130).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
1 (131).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
1 (132).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
1 (133).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
1 (14).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
1 (14).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
1 (15).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
1 (15).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
1 (16).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
1 (16).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
1 (17).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
1 (17).png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
1 (18).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
1 (18).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
1 (19).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
1 (19).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
1 (2).jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target 1 (12).jpg
- Size 150KB
- Sample260705-pywkraf19n
- SHA256 422028277e30ff476a67a5f153b77c24d34f042253a639a7fc8a13cb12afc019
- MD5 0b2a75c9900a5d4d303a2bf3acc2acbd
- SHA1 76195e4c9bfc7b2b85d20063f21d57deaae3b38a
- SHA512 4dbc28b382f5190890e87d1ead2e3a013341857eaab5d243f63a0183f8da7680a992c56a4abbd92a33f6b5b9a2538f196e5df92ae0d6371cf08c29d0788172f7
- SSDEEP 3072:ULoIFSEhDrjnDJYlorIXhDaWJ2EmOruzBrrrrL0Lj:ULoOFnWDaDdOruzBrrrrALj
- TLSH T199E3126B8C01592EC62A679C45D28D68ED9FFA30E5E425DB4C0E995FF838BC940C71AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4664 mspaint.exe 4664 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4664 mspaint.exe 4664 mspaint.exe 4664 mspaint.exe 4664 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\1 (12).jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4664
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3756