Overview
overview
3Static
static
1asw-cadill...pec.7z
windows10-2004-x64
1asw-cadill...pec.7z
windows11-ltsc_2024-x64
1nohesi_ct5...n.json
windows10-2004-x64
3nohesi_ct5...n.json
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...ay.png
windows10-2004-x64
1nohesi_ct5...ay.png
windows11-ltsc_2024-x64
1nohesi_ct5...nd.png
windows10-2004-x64
1nohesi_ct5...nd.png
windows11-ltsc_2024-x64
1nohesi_ct5.../7.png
windows10-2004-x64
1nohesi_ct5.../7.png
windows11-ltsc_2024-x64
1nohesi_ct5.../8.png
windows10-2004-x64
1nohesi_ct5.../8.png
windows11-ltsc_2024-x64
1nohesi_ct5...f2.dds
windows10-2004-x64
3nohesi_ct5...f2.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f3.dds
windows10-2004-x64
3nohesi_ct5...f3.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f4.dds
windows10-2004-x64
3nohesi_ct5...f4.dds
windows11-ltsc_2024-x64
3nohesi_ct5...l3.dds
windows10-2004-x64
3nohesi_ct5...l3.dds
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
nohesi_ct5v/texture/display.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
nohesi_ct5v/texture/display.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
nohesi_ct5v/texture/display_background.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
nohesi_ct5v/texture/display_background.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win11ltsc2024-20260709-en
General
- Target nohesi_ct5v/texture/display_background.png
- Size 3KB
- Sample260903-2g932agm21
- SHA256 0434270e32fa2157145c8ee0005dc248ba66c9dc1184304038330c1e0438fcb3
- MD5 0d7b6b991255f5cf65de1a4f6f4cb1c8
- SHA1 65435f534c8324a3384ae2b84f14beb685346ae0
- SHA512 4999b49958a103d9df9a974db09c2d6f9ea86d44739ddb5e10038946b6872f62ebb2f2e7322eea33c1d22026b13e4edc611c4f261d351a406183508336ff1ec6
- TLSH T1A971CA0A79319F00C40C7A7CD9EF66427B67BB8C5A0052469FE9E53B4F907A8CC495C2
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3852 mspaint.exe 3852 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3852 mspaint.exe 3852 mspaint.exe 3852 mspaint.exe 3852 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\nohesi_ct5v\texture\display_background.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3852
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5080