Analysis
- max time kernel
898s - max time network
435s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
10/07/2026, 00:49
Static task
static1
Behavioral task
behavioral1
Sample
IMG-20260709-WA0005.jpg
Resource
win10ltsc2021-20260513-en
2 signatures
900 seconds
General
- Target IMG-20260709-WA0005.jpg
- Size 25KB
- Sample260710-a6m61scx21
- SHA256 bde4c2ef22f2d0351df2aeeb501f6881b8d659d855922eb495c99330671f1d14
- MD5 9cea7b89d02a153032ef090676e29085
- SHA1 e1570b40d71ba02ed3b52b8e2884a9518e23d36f
- SHA512 9d4cb9ad3a096fce92df1b9f73ad84ff5edb918869c1bb11afc7aa5bafdecf8de16ad9d9dee0fa7d60ea76230aad152bc185e3bb97e5a6e16d917fef58f0bf1f
- SSDEEP 768:/8M4Dp7sR6BloGw9iotMyJqUeJdLTeCUVbtwfS:/8M4Dp7tBloGNQ7JqUQdLq6a
- TLSH T141C2F14F5242D239C76A333E507B89DA27DC3860C72DE220187CCA6B9E564F90DC5686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4232 mspaint.exe 4232 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4232 mspaint.exe 4232 mspaint.exe 4232 mspaint.exe 4232 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\IMG-20260709-WA0005.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4232
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1584