Overview
overview
1Static
static
1d41e6b01-5...9d.eml
windows10-2004-x64
1d41e6b01-5...9d.eml
windows11-ltsc_2024-x64
120260724_154058.jpg
windows10-2004-x64
120260724_154058.jpg
windows11-ltsc_2024-x64
120260724_154117.jpg
windows10-2004-x64
120260724_154117.jpg
windows11-ltsc_2024-x64
120260724_154131.jpg
windows10-2004-x64
120260724_154131.jpg
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/07/2026, 12:40
Static task
static1
Behavioral task
behavioral1
Sample
d41e6b01-58da-403c-961e-08dee9896826/cb7bb9bb-06b1-d487-0544-305ee06c3f9d.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
d41e6b01-58da-403c-961e-08dee9896826/cb7bb9bb-06b1-d487-0544-305ee06c3f9d.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
20260724_154058.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
20260724_154058.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
20260724_154117.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
20260724_154117.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
20260724_154131.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
20260724_154131.jpg
Resource
win11ltsc2024-20260709-en
General
- Target 20260724_154117.jpg
- Size 1.7MB
- Sample260727-pv7tlseq9z
- SHA256 cfc403a11cfb4c5dd1b915fb10eb64ca29d408b13fc2cff7fd989214f4d175ce
- MD5 f0572d081d09ad4358424b8633d60604
- SHA1 36b26111203f7245b1fd4f0d0c728f3c3e9a2e6d
- SHA512 9d8f62b437f3de91deac111587f193924ac45f550da8636f482d0f70f777b4e8551ed5b5b516ab088d448873ee338cb8accfc3d237e1c814d55d446314efa293
- SSDEEP 49152:n8S//RUR1NP4FrTFiWn0n2Q2OgoHhKWgW:P/R61J4Ft1XQ2Og/WgW
- TLSH T1D0853318055F966AEBC4027F94DEC7CF1553A5A39688FD3098138B39D4BC275B28AF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3340 mspaint.exe 3340 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3340 mspaint.exe 3340 mspaint.exe 3340 mspaint.exe 3340 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\20260724_154117.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3340
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3968