Analysis
- max time kernel
19s - max time network
21s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
26/08/2026, 20:11
Behavioral task
behavioral1
Sample
BorisFX.VEGAS.Pro.2026.0.3-Team.V.R.rar
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
AppsURL QR.jpg
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Attention.txt
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
BorisFX Vegas patch 2026.0.3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
VR.nfo
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target AppsURL QR.jpg
- Size 49KB
- Sample260826-yycbjsvhmb
- SHA256 96e21d200f48bc20406924f51539ed0fa71af679d7e5e34581ffa95619dcc109
- MD5 bf04bfa709c63904914f4a61a4b1a2e5
- SHA1 bf3f5dc1be6d6348f928fd37f43903205744b5b6
- SHA512 9f57d03a46bf9a7fc7804b2975fb8c941287556c530943a4840da4319930f605708e09ffd24a6bae53e11e4ea70eb7a69c595b7e731a788798cbb79ebb2a5202
- SSDEEP 768:S8HoAUyIiD13sN5GBjzkFU1K0PUTXA5IaR9g31lZx61siYS99J3Lftp7UQbp84zW:S8Ho6D2N5ijHK0PyPyi1l3MznAQnW
- TLSH T1623302FA30B67A0FF07EE7B11563FD840312BBAB450F36AA2203765FDD495265636842
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4660 mspaint.exe 4660 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4660 mspaint.exe 4660 mspaint.exe 4660 mspaint.exe 4660 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\AppsURL QR.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4660
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:880