Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/08/2026, 01:19
Static task
static1
Behavioral task
behavioral1
Sample
1435618-kick-buttowski-suburban-daredevil.jpg
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
1435618-kick-buttowski-suburban-daredevil.jpg
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
1435618-kick-buttowski-suburban-daredevil.jpg
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
1435618-kick-buttowski-suburban-daredevil.jpg
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 1435618-kick-buttowski-suburban-daredevil.jpg
- Size 182KB
- Sample260814-bpswlsscjg
- SHA256 cc5e3e87c4a26812ed41d1dd8dfe1a0945c27f7abe47e878c0a54a44097f33b7
- MD5 30c5cd6bb38c8ba083da4fe2d73c7da3
- SHA1 58943e15537fa85b3c1cefa8609c5fe5de42dc94
- SHA512 34d361766cb1dcb22c520ac9d9f809a78751acc2fe0626d84f4e6a7b8856ec9a27875b3f7467050b8989488791860617eeeba6b34741c4a3956bc4e5b6d0f55f
- SSDEEP 3072:bol/tqKptnfDWk2UZnvv2Mq994e/TXbKQ9eKZpCEsgOBVx/cBhZjzx9tiWgepWyR:boDrrWHwvI994e/qKfFsgsv/8ZjzDfkY
- TLSH T19B04230738E77D4BC2F0A37B9BF0BB794E019A44930A1CC9FE6766082E8CD7A2495575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4308 mspaint.exe 4308 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4308 mspaint.exe 4308 mspaint.exe 4308 mspaint.exe 4308 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\1435618-kick-buttowski-suburban-daredevil.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4308
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4892