Overview
overview
3Static
static
3HorizonV3-... 2.zip
windows10-2004-x64
1HorizonV3-... 2.zip
windows11-ltsc_2024-x64
100_MANIFEST.txt
windows10-2004-x64
100_MANIFEST.txt
windows11-ltsc_2024-x64
101_ODUOZnteF.class
windows10-2004-x64
301_ODUOZnteF.class
windows11-ltsc_2024-x64
302_ingShs.class
windows10-2004-x64
302_ingShs.class
windows11-ltsc_2024-x64
303_eklycro....class
windows10-2004-x64
303_eklycro....class
windows11-ltsc_2024-x64
304_nregmsHunsbu.class
windows10-2004-x64
304_nregmsHunsbu.class
windows11-ltsc_2024-x64
305_nregmsH....class
windows10-2004-x64
305_nregmsH....class
windows11-ltsc_2024-x64
306_nregmsH....class
windows10-2004-x64
306_nregmsH....class
windows11-ltsc_2024-x64
307_nregmsH....class
windows10-2004-x64
307_nregmsH....class
windows11-ltsc_2024-x64
308_main.py
windows10-2004-x64
308_main.py
windows11-ltsc_2024-x64
309_app.dll
windows10-2004-x64
109_app.dll
windows11-ltsc_2024-x64
110_app.pyd...ts.bin
windows10-2004-x64
310_app.pyd...ts.bin
windows11-ltsc_2024-x64
311_engine_...er.png
windows10-2004-x64
111_engine_...er.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
58s - max time network
62s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/09/2026, 09:47
Static task
static1
Behavioral task
behavioral1
Sample
HorizonV3-triage-set 2.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
HorizonV3-triage-set 2.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
00_MANIFEST.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
00_MANIFEST.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
01_ODUOZnteF.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
01_ODUOZnteF.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
02_ingShs.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
02_ingShs.class
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
03_eklycroFbwkqgxDqczqnCtij.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
03_eklycroFbwkqgxDqczqnCtij.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
04_nregmsHunsbu.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
04_nregmsHunsbu.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
05_nregmsHunsbu_inner1.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
05_nregmsHunsbu_inner1.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
06_nregmsHunsbu_inner2.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
06_nregmsHunsbu_inner2.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
07_nregmsHunsbu_inner3.class
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
07_nregmsHunsbu_inner3.class
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
08_main.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
08_main.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
09_app.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
09_app.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
10_app.pyd_encrypted_constants.bin
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
10_app.pyd_encrypted_constants.bin
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
11_engine_stego_carrier.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
11_engine_stego_carrier.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target 11_engine_stego_carrier.png
- Size 16.2MB
- Sample260907-lsavbatepf
- SHA256 9fd6b3b123e38362f20f929f7c80ecccbf6c499822f15bd75105b35a850dc842
- MD5 fd8283a5804e5cafcf2350a8f9e480db
- SHA1 0f4be9f81a5933ab4a0ccc752327ab4c827099b5
- SHA512 898b894d94662ba6df001c07dd39cd1d09ed2ffba0b5b6d777951eb564ae9fe2617f1c67ebadb3d4c92c3715427ab470b9a27ad826cfee27adedfdcca33ccb88
- SSDEEP 393216:sdu4xgCyzqsl4glTHsWlTD3b9mPaS2dAkPgpdnQfa:sdu53z9Dp53pmyR7PgpdnR
- TLSH T12D0733E38B3326EA506B78314EEB316E1D0DC8166A51AE67F7740B97BD371D705AC00A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2028 mspaint.exe 2028 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2028 mspaint.exe 2028 mspaint.exe 2028 mspaint.exe 2028 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\11_engine_stego_carrier.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2028
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2272