Overview
overview
3Static
static
1asw-cadill...pec.7z
windows10-2004-x64
1asw-cadill...pec.7z
windows11-ltsc_2024-x64
1nohesi_ct5...n.json
windows10-2004-x64
3nohesi_ct5...n.json
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...ay.png
windows10-2004-x64
1nohesi_ct5...ay.png
windows11-ltsc_2024-x64
1nohesi_ct5...nd.png
windows10-2004-x64
1nohesi_ct5...nd.png
windows11-ltsc_2024-x64
1nohesi_ct5.../7.png
windows10-2004-x64
1nohesi_ct5.../7.png
windows11-ltsc_2024-x64
1nohesi_ct5.../8.png
windows10-2004-x64
1nohesi_ct5.../8.png
windows11-ltsc_2024-x64
1nohesi_ct5...f2.dds
windows10-2004-x64
3nohesi_ct5...f2.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f3.dds
windows10-2004-x64
3nohesi_ct5...f3.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f4.dds
windows10-2004-x64
3nohesi_ct5...f4.dds
windows11-ltsc_2024-x64
3nohesi_ct5...l3.dds
windows10-2004-x64
3nohesi_ct5...l3.dds
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
nohesi_ct5v/texture/display.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
nohesi_ct5v/texture/display.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
nohesi_ct5v/texture/display_background.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
nohesi_ct5v/texture/display_background.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win11ltsc2024-20260709-en
General
- Target nohesi_ct5v/texture/display.png
- Size 4KB
- Sample260903-2g932agm21
- SHA256 0ab379902c2c81263eeb1a1f59553764e4954920d3720fcedc916f5a02faea67
- MD5 e285477618dd94c558b949d56d1058cd
- SHA1 f252fb7cfec3f56b2ddd841f0c8a47ff9c9c5034
- SHA512 8f938ba90c1131f7396c5c46a7e8b95ede5d8cde179cb0fa664729ab1a55ad99df060da50846e93703db3edd3af34e9aff62e1769a8c30328e08e2af354acaf2
- SSDEEP 96:5SQkQWlknNigjkc/FfHRoH4VHKNG3OaiDAmGp9caYegjgvyf/:5SQkVknzkafxoYVqH3JjWy3
- TLSH T1A8A19506F913529AD8ACE77899DF0E752BB70B80D751C3282EAC46161C505BCCD2FED2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3108 mspaint.exe 3108 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3108 mspaint.exe 3108 mspaint.exe 3108 mspaint.exe 3108 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\nohesi_ct5v\texture\display.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3108
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:544