Overview
overview
3Static
static
1asw-cadill...pec.7z
windows10-2004-x64
1asw-cadill...pec.7z
windows11-ltsc_2024-x64
1nohesi_ct5...n.json
windows10-2004-x64
3nohesi_ct5...n.json
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...ay.png
windows10-2004-x64
1nohesi_ct5...ay.png
windows11-ltsc_2024-x64
1nohesi_ct5...nd.png
windows10-2004-x64
1nohesi_ct5...nd.png
windows11-ltsc_2024-x64
1nohesi_ct5.../7.png
windows10-2004-x64
1nohesi_ct5.../7.png
windows11-ltsc_2024-x64
1nohesi_ct5.../8.png
windows10-2004-x64
1nohesi_ct5.../8.png
windows11-ltsc_2024-x64
1nohesi_ct5...f2.dds
windows10-2004-x64
3nohesi_ct5...f2.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f3.dds
windows10-2004-x64
3nohesi_ct5...f3.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f4.dds
windows10-2004-x64
3nohesi_ct5...f4.dds
windows11-ltsc_2024-x64
3nohesi_ct5...l3.dds
windows10-2004-x64
3nohesi_ct5...l3.dds
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
nohesi_ct5v/texture/display.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
nohesi_ct5v/texture/display.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
nohesi_ct5v/texture/display_background.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
nohesi_ct5v/texture/display_background.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win11ltsc2024-20260709-en
General
- Target nohesi_ct5v/texture/flames/8.png
- Size 9KB
- Sample260903-2g932agm21
- SHA256 3cfc0c971b280474c3244fd95bf932229e3054e6ca1a8aa54ba198482410ce6b
- MD5 fd30d0b1d896bed793550e86ce490995
- SHA1 5ababcec678a917a77ce5014ee08f8681fd0836d
- SHA512 bf9bea0335ff50fda8d97d032fcaa3c01e19aed7fb62500d78fb7f125f6f946c60506a30f51c6fb5d92b2f5a03bc4a042f21e0e9ddd099924039a2145bf92137
- SSDEEP 192:MSDS0tKg9E05TqbJvkemsvm5qiyltTsU6a0Vj2jga1vgr:LJXE05czDi2JWr
- TLSH T12C22C0A53A613137F88F7DC3730A892128399ABCE46A1B148C57A2D05549B96CF6FC27
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3292 mspaint.exe 3292 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3292 mspaint.exe 3292 mspaint.exe 3292 mspaint.exe 3292 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\nohesi_ct5v\texture\flames\8.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3292
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4784