Overview
overview
3Static
static
3net8.0-win...01.zip
windows10-2004-x64
1net8.0-win...01.zip
windows11-ltsc_2024-x64
1net8.0-win...-5.jpg
windows10-2004-x64
1net8.0-win...-5.jpg
windows11-ltsc_2024-x64
1net8.0-win...ig.txt
windows10-2004-x64
1net8.0-win...ig.txt
windows11-ltsc_2024-x64
1net8.0-win...s.json
windows10-2004-x64
3net8.0-win...s.json
windows11-ltsc_2024-x64
3net8.0-win...w8.exe
windows10-2004-x64
1net8.0-win...w8.exe
windows11-ltsc_2024-x64
1net8.0-win...w8.exe
windows10-2004-x64
3net8.0-win...w8.exe
windows11-ltsc_2024-x64
1net8.0-win...w8.pdb
windows10-2004-x64
3net8.0-win...w8.pdb
windows11-ltsc_2024-x64
3net8.0-win...g.json
windows10-2004-x64
3net8.0-win...g.json
windows11-ltsc_2024-x64
3net8.0-win...go.png
windows10-2004-x64
1net8.0-win...go.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/08/2026, 10:39
Static task
static1
Behavioral task
behavioral1
Sample
net8.0-windows-20260812T103835Z-1-001.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
net8.0-windows-20260812T103835Z-1-001.zip
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
net8.0-windows/config.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
net8.0-windows/config.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
net8.0-windows/launcher iw8.deps.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
net8.0-windows/launcher iw8.deps.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
net8.0-windows/launcher iw8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
net8.0-windows/launcher iw8.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
net8.0-windows/launcher iw8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
net8.0-windows/launcher iw8.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
net8.0-windows/launcher iw8.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
net8.0-windows/launcher iw8.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
net8.0-windows/launcher iw8.runtimeconfig.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
net8.0-windows/launcher iw8.runtimeconfig.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
net8.0-windows/logo.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
net8.0-windows/logo.png
Resource
win11ltsc2024-20260709-en
General
- Target net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
- Size 338KB
- Sample260812-mp6cgseq31
- SHA256 fe57f0e9a1264901fb6c554ff4cf55d2b726cdd54601bec08f26d627844e646e
- MD5 e0b90fd7e56bb9478bdff9644ab17f99
- SHA1 b8b515c2af5a87f91feb22d22b54550bdeae39a2
- SHA512 f3f45312abcc2df8f55d49e46fb1e5c27c53bd1239f65732fc98a69eb77a2512e309f99bdac8d022831629e8c0d9a2cbb7aab8a5f14e5240eebedd0e84ea825c
- SSDEEP 6144:UonfYpS3NuvJjEm3w5RP4Enu2B7mMi07PdpWM7YjiFbuEJo2rM6OWz:UAqEOwPQiT7GyPZ0iZuEXww
- TLSH T14974C0079C059B83A42983F8BE434EAC1F463B5DE98279FF45275ECB7E206611C9E02D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4952 mspaint.exe 4952 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4952 mspaint.exe 4952 mspaint.exe 4952 mspaint.exe 4952 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\net8.0-windows\call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4952
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3184