Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 21:34
Static task
static1
Behavioral task
behavioral1
Sample
457f0846-7b3e-43e7-b7ac-08dee833f621/b56f84ff-4f02-5500-0498-e45423c4c6da.eml
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
457f0846-7b3e-43e7-b7ac-08dee833f621/b56f84ff-4f02-5500-0498-e45423c4c6da.eml
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
1.png
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
1.png
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 1.png
- Size 2.2MB
- Sample260804-1ep5eaen9s
- SHA256 4970cbc942f7ef34e03a43d453393d03adf3943f56d10b701126ff32fe41754b
- MD5 530c3e6880d868b69880297aa912a16b
- SHA1 ca4b1480851d87b1c2c9082ff6ef2065e57b9423
- SHA512 0710fcda6be83f5e353058c4068f4a10e558ea7da7f8626c05504204581bb8d2ca37174438b4f38a9842ce3b351b720e262bd0fffb6477d906366a546790a782
- SSDEEP 49152:Dll+6RFi/b7At374QTIWqZa7BTdWN9iTvmW/:DlUwifY37Kt0p49i68
- TLSH T159B53396D162495DA1DDB33783D4ED4DEC0198A463B1DC3B03283AA66B1385CF3BD62E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4544 mspaint.exe 4544 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4544 mspaint.exe 4544 mspaint.exe 4544 mspaint.exe 4544 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\1.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4544
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4144