Resubmissions
09/08/2026, 17:58
260809-wkavfsbl2w109/08/2026, 17:55
260809-whxw7sbf87109/08/2026, 17:55
260809-whhghssgqg1Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
09/08/2026, 17:58
Static task
static1
Behavioral task
behavioral1
Sample
IC.png
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
General
- Target IC.png
- Size 129KB
- Sample260809-wkavfsbl2w
- SHA256 7548eaa4cfeefd781154e69b66aa31aae8a5685028d1e03c8602c2fc77bbff4e
- MD5 1bec5f8af81cfdcdf8c537dba6f16cb3
- SHA1 670e0d35f7822951aefa429f10fb1a7b478e8341
- SHA512 8f2eac4523283ea3bfd6c2b931d9ad872f4e9ac0ed6839c333166fb33191e0440913d0e5629648ae17078d75f50a3ef16fe421c9466de04f87dac2a2deae35ca
- SSDEEP 3072:Gpw+VokZa0v4CrODJto+P0Cx9uS8ZmnuEzj6LO:+w8Zdv41rkqMS8ZCnOa
- TLSH T1CBD30180FD669C59D9A8E832CC833B3BF7F9C65084945B49D3A6A9343947143BDE3AC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 624 mspaint.exe 624 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 624 mspaint.exe 624 mspaint.exe 624 mspaint.exe 624 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\IC.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:624
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4376