Overview
overview
3Static
static
1HexagonRadial.zip
windows10-2004-x64
1HexagonRadial.zip
windows11-ltsc_2024-x64
1[Content_Types].xml
windows10-2004-x64
3[Content_Types].xml
windows11-ltsc_2024-x64
1_rels/.xml
windows10-2004-x64
3_rels/.xml
windows11-ltsc_2024-x64
1diagrams/layout1.xml
windows10-2004-x64
3diagrams/layout1.xml
windows11-ltsc_2024-x64
1diagrams/l...r1.xml
windows10-2004-x64
3diagrams/l...r1.xml
windows11-ltsc_2024-x64
1docProps/t...il.jpg
windows10-2004-x64
1docProps/t...il.jpg
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/08/2026, 23:31
Static task
static1
Behavioral task
behavioral1
Sample
HexagonRadial.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
HexagonRadial.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
[Content_Types].xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
[Content_Types].xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
_rels/.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_rels/.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
diagrams/layout1.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
diagrams/layout1.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
diagrams/layoutHeader1.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
diagrams/layoutHeader1.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
docProps/thumbnail.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
docProps/thumbnail.jpg
Resource
win11ltsc2024-20260709-en
General
- Target docProps/thumbnail.jpg
- Size 1KB
- Sample260811-3hrthseq71
- SHA256 68a24af7c23b7754fb4fb0008cce000ac55ec034a126df3b1f9429c68b37f706
- MD5 c886b5d3907695346cd83879f8561891
- SHA1 249098f0c9fee00a68d33a53f6fd1b05cfc7c064
- SHA512 23f10e93c42ab004ad3ef7f6dda58700e7149c7138c4cf6aff646cf3d3b6128bdfcfddd9fe73ad5e9c74b3b0d836b9fcf456591e47ffc96e1fdcc6fda8e47315
- TLSH T12D412B278F139C74E8D1C5F81811D487EB9F79A37A936901142192B2F6C48CAA4D4D14
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2444 mspaint.exe 2444 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2444 mspaint.exe 2444 mspaint.exe 2444 mspaint.exe 2444 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\docProps\thumbnail.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2444
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1136