Overview
overview
3Static
static
3Ichika_by ...49.rar
windows10-2004-x64
1Ichika_by ...49.rar
windows11-ltsc_2024-x64
1Ichika_by ...e3.png
windows10-2004-x64
1Ichika_by ...e3.png
windows11-ltsc_2024-x64
1Ichika_by ...30.png
windows10-2004-x64
1Ichika_by ...30.png
windows11-ltsc_2024-x64
1Ichika_by ...31.png
windows10-2004-x64
1Ichika_by ...31.png
windows11-ltsc_2024-x64
1Ichika_by ...32.png
windows10-2004-x64
1Ichika_by ...32.png
windows11-ltsc_2024-x64
1Ichika_by ...33.png
windows10-2004-x64
1Ichika_by ...33.png
windows11-ltsc_2024-x64
1Ichika_by ...34.png
windows10-2004-x64
1Ichika_by ...34.png
windows11-ltsc_2024-x64
1Ichika_by ...35.png
windows10-2004-x64
1Ichika_by ...35.png
windows11-ltsc_2024-x64
1Ichika_by ...36.png
windows10-2004-x64
1Ichika_by ...36.png
windows11-ltsc_2024-x64
1Ichika_by ...37.png
windows10-2004-x64
1Ichika_by ...37.png
windows11-ltsc_2024-x64
1Ichika_by ...38.png
windows10-2004-x64
1Ichika_by ...38.png
windows11-ltsc_2024-x64
1Ichika_by ...39.png
windows10-2004-x64
1Ichika_by ...39.png
windows11-ltsc_2024-x64
1Ichika_by ...e4.png
windows10-2004-x64
1Ichika_by ...e4.png
windows11-ltsc_2024-x64
1Ichika_by ...40.png
windows10-2004-x64
1Ichika_by ...40.png
windows11-ltsc_2024-x64
1Ichika_by ...41.png
windows10-2004-x64
1Ichika_by ...41.png
windows11-ltsc_2024-x64
1Ichika_by ...42.png
windows10-2004-x64
1Ichika_by ...42.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/07/2026, 22:09
Static task
static1
Behavioral task
behavioral1
Sample
Ichika_by mimikitty49.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ichika_by mimikitty49.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Ichika_by mimikitty49/img/Shimeji/shime3.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Ichika_by mimikitty49/img/Shimeji/shime3.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Ichika_by mimikitty49/img/Shimeji/shime30.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Ichika_by mimikitty49/img/Shimeji/shime30.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Ichika_by mimikitty49/img/Shimeji/shime31.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Ichika_by mimikitty49/img/Shimeji/shime31.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Ichika_by mimikitty49/img/Shimeji/shime32.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Ichika_by mimikitty49/img/Shimeji/shime32.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Ichika_by mimikitty49/img/Shimeji/shime33.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Ichika_by mimikitty49/img/Shimeji/shime33.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Ichika_by mimikitty49/img/Shimeji/shime34.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Ichika_by mimikitty49/img/Shimeji/shime34.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Ichika_by mimikitty49/img/Shimeji/shime35.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Ichika_by mimikitty49/img/Shimeji/shime35.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Ichika_by mimikitty49/img/Shimeji/shime36.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Ichika_by mimikitty49/img/Shimeji/shime36.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Ichika_by mimikitty49/img/Shimeji/shime37.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Ichika_by mimikitty49/img/Shimeji/shime37.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Ichika_by mimikitty49/img/Shimeji/shime38.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Ichika_by mimikitty49/img/Shimeji/shime38.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Ichika_by mimikitty49/img/Shimeji/shime39.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Ichika_by mimikitty49/img/Shimeji/shime39.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Ichika_by mimikitty49/img/Shimeji/shime4.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Ichika_by mimikitty49/img/Shimeji/shime4.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Ichika_by mimikitty49/img/Shimeji/shime40.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Ichika_by mimikitty49/img/Shimeji/shime40.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Ichika_by mimikitty49/img/Shimeji/shime41.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Ichika_by mimikitty49/img/Shimeji/shime41.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Ichika_by mimikitty49/img/Shimeji/shime42.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Ichika_by mimikitty49/img/Shimeji/shime42.png
Resource
win11ltsc2024-20260709-en
General
- Target Ichika_by mimikitty49/img/Shimeji/shime31.png
- Size 22KB
- Sample260724-12vneathpb
- SHA256 b1ba4dab5e2e6f802eaf98952fa0217df5f47140470bc75949639bd1012c8a1e
- MD5 842b8745f46380bc27ed750e8d34f6fc
- SHA1 a30b5c3f0d085b6d0777ef9e46d0c601f6db7a9b
- SHA512 bdd19d02b428c7b73acc7a948b3089de5c3c0be550872741a71761f96c04476fd56b3b5cc407e63d8c9c77dba1c612e5b6cffa939d40af390989005022dc572d
- SSDEEP 384:+vEk00yujv3OcWGDaBfnKOFJreJALLjqM0ir5BmniGJiApcgVAzC:I04fOcWGDaJKQiALLjqM15BmiGJiApr
- TLSH T1EAB2E124C2AADD6960B0E6BD85783F4B107BB6D04FA5977C122E81DE7B11EAE38354C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 448 mspaint.exe 448 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 448 mspaint.exe 448 mspaint.exe 448 mspaint.exe 448 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Ichika_by mimikitty49\img\Shimeji\shime31.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:448
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:6000