Analysis
- geolocation tags
- max time kernel
899s - max time network
486s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
28/07/2026, 23:03
General
- Target Balance Client Extension/icon128.png
- Size 502B
- Sample260728-211npsycph
- SHA256 5d5960937c4f565751568d9e6feba6cbdc259ca4e00862420187ef9346080050
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Balance Client Extension\icon128.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵