Overview
overview
4Static
static
4request_19...18.zip
windows10-2004-x64
1request_19...18.zip
windows11-ltsc_2024-x64
1.eml
windows10-2004-x64
1.eml
windows11-ltsc_2024-x64
1Financial ...v2.pdf
windows10-2004-x64
3Financial ...v2.pdf
windows11-ltsc_2024-x64
3Outlook-2ohm5u0j.jpg
windows10-2004-x64
1Outlook-2ohm5u0j.jpg
windows11-ltsc_2024-x64
1Outlook-vb4f2s0o.png
windows10-2004-x64
1Outlook-vb4f2s0o.png
windows11-ltsc_2024-x64
1email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1Financial ...v2.pdf
windows10-2004-x64
3Financial ...v2.pdf
windows11-ltsc_2024-x64
3Analysis
- max time kernel
298s - max time network
195s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 09:57
Behavioral task
behavioral1
Sample
request_190098_1785837337218.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
request_190098_1785837337218.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
.eml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Financial planning basics - Keolis MHI v2.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Financial planning basics - Keolis MHI v2.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Outlook-2ohm5u0j.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Outlook-2ohm5u0j.jpg
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
Outlook-vb4f2s0o.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Outlook-vb4f2s0o.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
email-html-2.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Financial planning basics - Keolis MHI v2.pdf
Resource
win10v2004-20260513-en
General
- Target Outlook-vb4f2s0o.png
- Size 14KB
- Sample260804-ly8njaxcmf
- SHA256 9456a003a3f7862dd70e75a9430a3054c8814f6b020a3bc6c4343f645c2a091f
- MD5 d82c6106cf63c68f0aa41c860a27f360
- SHA1 6c9e2fc3abbb7286ebe7fbd0609c84969a39253a
- SHA512 1c9add93ed8631b9807037a769d8dbf542aafeea954270797d70a30a19c03ab8df2055787a7e68bf3dcc0e7bddcb1b11e41d50e3f4890f4ee1d629e10c8eadcb
- SSDEEP 192:08kBopRcWUtGwHDxM04JfNwhFVrNzoV7b0PDmPOL2g7eJDeqWjhsnAyo+3PZf4R8:0rBobbrwHDxs7whbmGDmGreZemAHmmG
- TLSH T17562D04BC2C92A107E8A3FB058338A7849141F1A685FF6DC953B38CD5E17203FA9D268
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1752 mspaint.exe 1752 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1752 mspaint.exe 1752 mspaint.exe 1752 mspaint.exe 1752 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Outlook-vb4f2s0o.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1752
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4428