Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 19:54
Static task
static1
Behavioral task
behavioral1
Sample
crximagee.png
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
crximagee.png
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
crximagee.png
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target crximagee.png
- Size 25KB
- Sample260803-ymjaqaap7t
- SHA256 746e2561c8f9a7cd8023ba00602e6766042eb07a83d86529ec49d0caf266bf52
- MD5 0ac4351eaf4e485925a16896d2b78abf
- SHA1 1001af454c3b03b3cf0a9e29a52bb1b36b94631e
- SHA512 f265c5c82888d52b20c25e1547d6d37e02f638d44cb379bea127f6a9d3d33d4f8e0a035473a9b896faa564beb07b2483b2b6cb0caf7502ae1b326a7c8f9194ac
- SSDEEP 384:T3kVxUNVQQW9MpoR/679C7n4LNurPfyd5fiRkDByrIYjWk8V9llKVI6NHB6C/Q:7uxUXJc/cw4BMPfyrRl75FGgD
- TLSH T124C2E13459163CD8364582EB0427A2A673BA928D8E78EF778734F11D6201F47E3352C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 556 mspaint.exe 556 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 556 mspaint.exe 556 mspaint.exe 556 mspaint.exe 556 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\crximagee.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:556
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1000