Overview
overview
8Static
static
1New folder.zip
windows10-2004-x64
1New folder.zip
windows11-ltsc_2024-x64
8New folder...91.png
windows10-2004-x64
1New folder...91.png
windows11-ltsc_2024-x64
1New folder... 1.png
windows10-2004-x64
1New folder... 1.png
windows11-ltsc_2024-x64
1New folder...32.png
windows10-2004-x64
1New folder...32.png
windows11-ltsc_2024-x64
8New folder... 1.png
windows10-2004-x64
1New folder... 1.png
windows11-ltsc_2024-x64
1New folder...61.gif
windows10-2004-x64
3New folder...61.gif
windows11-ltsc_2024-x64
1New folder... 1.gif
windows10-2004-x64
3New folder... 1.gif
windows11-ltsc_2024-x64
8New folder...56.png
windows10-2004-x64
1New folder...56.png
windows11-ltsc_2024-x64
8New folder... 1.png
windows10-2004-x64
1New folder... 1.png
windows11-ltsc_2024-x64
8New folder...d5.png
windows10-2004-x64
1New folder...d5.png
windows11-ltsc_2024-x64
8New folder... 1.png
windows10-2004-x64
1New folder... 1.png
windows11-ltsc_2024-x64
8Analysis
- max time kernel
898s - max time network
429s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 02:43
Static task
static1
Behavioral task
behavioral1
Sample
New folder.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
New folder.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
New folder/img-29b545c4-6b21-4abb-87e0-55b5d5d55391.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
New folder/img-29b545c4-6b21-4abb-87e0-55b5d5d55391.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
New folder/img-29b545c4-6b21-4abb-87e0-55b5d5d55391 1.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
New folder/img-29b545c4-6b21-4abb-87e0-55b5d5d55391 1.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
New folder/img-4fe2b7aa-7024-4275-851c-f59118530632.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
New folder/img-4fe2b7aa-7024-4275-851c-f59118530632.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
New folder/img-4fe2b7aa-7024-4275-851c-f59118530632 1.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
New folder/img-4fe2b7aa-7024-4275-851c-f59118530632 1.png
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
New folder/img-854692b8-f7fb-4cc4-b925-119d1f0a4561.gif
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
New folder/img-854692b8-f7fb-4cc4-b925-119d1f0a4561.gif
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
New folder/img-854692b8-f7fb-4cc4-b925-119d1f0a4561 1.gif
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
New folder/img-854692b8-f7fb-4cc4-b925-119d1f0a4561 1.gif
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
New folder/img-9dff32dd-4e4d-4caa-953d-6b340d6ee556.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
New folder/img-9dff32dd-4e4d-4caa-953d-6b340d6ee556.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
New folder/img-9dff32dd-4e4d-4caa-953d-6b340d6ee556 1.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
New folder/img-9dff32dd-4e4d-4caa-953d-6b340d6ee556 1.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
New folder/img-b8fdb546-c801-4edf-9360-228c118a64d5.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
New folder/img-b8fdb546-c801-4edf-9360-228c118a64d5.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
New folder/img-b8fdb546-c801-4edf-9360-228c118a64d5 1.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
New folder/img-b8fdb546-c801-4edf-9360-228c118a64d5 1.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target New folder/img-29b545c4-6b21-4abb-87e0-55b5d5d55391.png
- Size 2KB
- Sample260803-c72rxabb74
- SHA256 b6a4da72eb8e1633d1314911da93b482e6153950e9b66ac44c411f7871148506
- MD5 c08d367fcfc6928dc3d599bb1617559a
- SHA1 9763f7eb4d64638aec736561bb7ab51098a15ab4
- SHA512 a7119eb33eac9fe5b594646420dd484e6a298f697eb654ca27de58cd6a88508e50cdea83d3514f7645a1cfc601ade71148d2f519dc680e374848a69ef2b09878
- TLSH T112412BA21B031C9CC5FC1372A6275A49F821F0D6157AC4DFBE03F87A24515E45D2615D
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1372 mspaint.exe 1372 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1372 mspaint.exe 1372 mspaint.exe 1372 mspaint.exe 1372 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\New folder\img-29b545c4-6b21-4abb-87e0-55b5d5d55391.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1372
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3916