Analysis
- user interaction
yes - max time kernel
38s - max time network
41s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/08/2026, 03:42
Static task
static1
Behavioral task
behavioral1
Sample
info_New_Order_7132026 _PDF.shtml(~99 KB).js
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
info_New_Order_7132026 _PDF.shtml(~99 KB).js
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
sanmina-sci(m)sdnbhd.jpg
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
sanmina-sci(m)sdnbhd.jpg
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target sanmina-sci(m)sdnbhd.jpg
- Size 31KB
- Sample260817-d9jjsasfqa
- SHA256 e7af8607b2dca855799f4c95a885d05a263a73e1765d07a3c5b750307d7af6cf
- MD5 556ff88770779244f9add1dc845542d7
- SHA1 9e8b1bec893fb95975ce2d7f4d98c2a048904a60
- SHA512 92f3d22882ac14941f05fb54d2ae2dbd540efa3e6cdd20569675772f6a8c4c38e84246155604dbd739ed09fe07597166612d0eb451da4191e2b1e041bc3837c6
- SSDEEP 384:QF46X4DWcy6vcNL1rKNoCNp6r61LgmBFsSjeqM1mTp5RZwaLnKoz0YrQ1/bvY:QF34DncfDCd1LgmGwwcp5EaTKO81/E
- TLSH T12BE2280798048B83F55197B8FE471EA91B4A2649F4D737FA306E6DCB6F247620D9A03C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4876 mspaint.exe 4876 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4876 mspaint.exe 4876 mspaint.exe 4876 mspaint.exe 4876 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\sanmina-sci(m)sdnbhd.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4876
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2984