Analysis
- geolocation tags
cacanadananorth-americatoronto - max time kernel
899s - max time network
452s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 08:04
Static task
static1
Behavioral task
behavioral1
Sample
lionel-messi.jpg
Resource
win10v2004-20260513-en
22 signatures
900 seconds
Behavioral task
behavioral2
Sample
lionel-messi.jpg
Resource
win11ltsc2024-20260709-en
2 signatures
900 seconds
General
- Target lionel-messi.jpg
- Size 95KB
- Sample260723-jyn8saad59
- SHA256 ec53dbea4d05a9e2ab1d88af61759deeacc2db1cda8cfccd135c0a2f7cdd9344
- MD5 f27a54ed0a109cb07b54aeb90a63db0a
- SHA1 30a4c3dee3200c86e1b81f379186a974d7c6ea49
- SHA512 57d75cd90aad4980997e5a7df75bf35451b145e069046cf7649672ff003609024ed65ed0b430b2c3f7c2962ef59afda9c5efc0702b751f5bb442a5596110b85c
- SSDEEP 1536:3nav4pnav6v3ctOjUufa1v10Z1zPUyKxZJ6DXkAV7Ue3+flK0nBxnYtd2lqI1W:3agpaS4OjLSaTzvKxZJ697NOf/BOtMle
- TLSH T102A3F128B7719C52E8CA227195FCC392AB137DC41FE72307BEBC69463F015A5CD99A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1784 mspaint.exe 1784 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1784 mspaint.exe 1784 mspaint.exe 1784 mspaint.exe 1784 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\lionel-messi.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1784
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5344
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:696