Overview
overview
3Static
static
1mohmansour..._1.eml
windows10-2004-x64
1mohmansour..._1.eml
windows11-ltsc_2024-x64
3email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1image001.png
windows10-2004-x64
1image001.png
windows11-ltsc_2024-x64
1image002.png
windows10-2004-x64
1image002.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/07/2026, 08:23
Static task
static1
Behavioral task
behavioral1
Sample
mohmansour_2026_07_23_attch_1_of_1.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
mohmansour_2026_07_23_attch_1_of_1.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
image001.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
image001.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
image002.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
image002.png
Resource
win11ltsc2024-20260709-en
General
- Target image002.png
- Size 8KB
- Sample260723-kabs8athqa
- SHA256 e6827a327b08229b2379a27a8578789e6741476785747ee590de7dc83b2373ad
- MD5 6254eed9aff29e7ebaee45eb08da6bf6
- SHA1 b9e113913e4b1df561ebd170ba9b8c6d50c0ab8f
- SHA512 57e00f5fcea0eea5f9bf43a7741d9706917f69984e49841ef6957a1494c875d4d98f29c35478cc0784d402b0333cc7d1da18b6039154680dfff2f9003c87e5f7
- SSDEEP 192:GY2eBOibXpSxIoI47vpJYL3ArC2Z3I4o3oJ3GH4n:GY2ilbXXOkreC2Z3I4YgGU
- TLSH T1211249A7EC94BA4F98811985974BB4D6D2B1A823BE520F4F5F401A70AC131D2FD3BC53
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2024 mspaint.exe 2024 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2024 mspaint.exe 2024 mspaint.exe 2024 mspaint.exe 2024 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image002.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2024
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4120