Overview
overview
4Static
static
1MuMu-setup...55.exe
windows10-ltsc_2021-x64
4.data
windows10-ltsc_2021-x64
3.rdata
windows10-ltsc_2021-x64
3.rsrc/DIALOG/105
windows10-ltsc_2021-x64
3.rsrc/DIALOG/106
windows10-ltsc_2021-x64
3.rsrc/GROUP_ICON/103
windows10-ltsc_2021-x64
3.rsrc/ICON/1.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/2.png
windows10-ltsc_2021-x64
1.rsrc/ICON/3.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/4.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/5.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/6.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/7.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/8.ico
windows10-ltsc_2021-x64
3.rsrc/ICON/9.ico
windows10-ltsc_2021-x64
3.rsrc/MANIFEST/1.xml
windows10-ltsc_2021-x64
3.text
windows10-ltsc_2021-x64
3CERTIFICATE
windows10-ltsc_2021-x64
3[0]
windows10-ltsc_2021-x64
3Analysis
- max time kernel
901s - max time network
533s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
31/07/2026, 01:55
Static task
static1
Behavioral task
behavioral1
Sample
MuMu-setup-mumu15-V15.3.1.4677-overseas-0720224255.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
.data
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
.rdata
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
.rsrc/DIALOG/105
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
.rsrc/DIALOG/106
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
.rsrc/GROUP_ICON/103
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
.rsrc/ICON/1.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
.rsrc/ICON/2.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
.rsrc/ICON/3.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
.rsrc/ICON/4.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
.rsrc/ICON/5.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral12
Sample
.rsrc/ICON/6.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral13
Sample
.rsrc/ICON/7.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral14
Sample
.rsrc/ICON/8.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral15
Sample
.rsrc/ICON/9.ico
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral16
Sample
.rsrc/MANIFEST/1.xml
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral17
Sample
.text
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral18
Sample
CERTIFICATE
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral19
Sample
[0]
Resource
win10ltsc2021-20260513-en
General
- Target .rsrc/ICON/2.png
- Size 33KB
- Sample260731-cb79taah76
- SHA256 8fcced66450b5348647f21aa40d6699bf3391276830e963465a4a75045ab3894
- MD5 0b3fb7661c41082f32b78a7be3f65f8e
- SHA1 63c888823d47f9e1a6d96a169489436a279def55
- SHA512 b0dd40999e94915817eb5a24b3660fc18ba177a8d567ea56470452e5a2ecad189ce868ee4521ee81dbf342e22aff4001dc3e70026bdfc6b36d9d0c5a0a6bee58
- SSDEEP 768:BGMX2DYbk9OwsvcClq7HQy2fe6LTgTg7FP+pWdFTosi+HNkZ86eBDRvk:j8Yb3cClqUy2fHTg87FP+Id1ziwe16Dy
- TLSH T176E2E094EDB0CD571E8AB919F7840C6702454DDE333AAA1F9BFC48212A1DEED4ED2511
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4896 mspaint.exe 4896 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4896 mspaint.exe 4896 mspaint.exe 4896 mspaint.exe 4896 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\.rsrc\ICON\2.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4896
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5076