Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 19:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hidepaint.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
hidepaint.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target hidepaint.exe
- Size 17.5MB
- Sample260720-x76fbaex9z
- SHA256 f0c49de30bdf4d2422a10f91de2ecaae1f848f07a4d1c27ded3f9e8de5e63164
- MD5 e7ca9474665c0d38573da56f557905c7
- SHA1 7584624520eba2db3ec537267cc9b26271027233
- SHA512 bc8a42993f44ed3eec58653544f595b6d8376ad96877360cdbcfc86bf953c73f70fcc29d040e826505a5e2e5f1a3b35979068c232c69d0ea2b231c19ecd29416
- SSDEEP 98304:MZfGk2nwUDI/kZ+9Qj1nQbDER8pN+IKW:MZfGgM+y1Q48XPKW
- TLSH T17D07F62AE6001CA8E4E9D039996F764260B0345B4EF4BC9B335D4E0D5F7E26D1A7B70B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3672 hidepaint.exe 3672 hidepaint.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3672 hidepaint.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3672 hidepaint.exe