Analysis
- max time kernel
598s - max time network
550s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 17:46
Static task
static1
Behavioral task
behavioral1
Sample
attachments - 2026-08-10T132919.410.jpeg.7z
Resource
win10v2004-20260513-en
8 signatures
600 seconds
Behavioral task
behavioral2
Sample
attachments - 2026-08-10T132919.410.jpeg.7z
Resource
win11ltsc2024-20260709-en
4 signatures
600 seconds
Behavioral task
behavioral3
Sample
attachments - 2026-08-10T132919.410.jpg
Resource
win10v2004-20260513-en
2 signatures
600 seconds
Behavioral task
behavioral4
Sample
attachments - 2026-08-10T132919.410.jpg
Resource
win11ltsc2024-20260709-en
14 signatures
600 seconds
General
- Target attachments - 2026-08-10T132919.410.jpg
- Size 30KB
- Sample260810-wcdalsthpb
- SHA256 8950389236df00a64c1f7edc7d15fa711889b7f922a66b336848dd66c1c2e5e5
- MD5 3c139cd7b228ed4f3331c90c3dcf3e3c
- SHA1 a263cbb0a2c9b0874e9c84cbb98f72b30586f107
- SHA512 709bce0db23c3d5294add2fb5aca344df8b869de65f6f64cb7c327877f3214cc13b85414c2f00bed4067019528c10856e4fcba4ad68934e63d2681d8da89f105
- SSDEEP 768:/8F6xsXoOpPbVKZahy6SfqH6XlMPIcBfm:/8Exsffhy6Syeifm
- TLSH T10ED2CF2EB3098225F429A3F32D8F9B7F58257ED8D0841383DCE46D1BB81D6F58AA41D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4076 mspaint.exe 4076 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4076 mspaint.exe 4076 mspaint.exe 4076 mspaint.exe 4076 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\attachments - 2026-08-10T132919.410.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4076
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3344