Analysis
- max time kernel
898s - max time network
560s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/09/2026, 20:16
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT Image 7 Eyl 2026 21_29_10.png
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
ChatGPT Image 7 Eyl 2026 21_29_10.png
Resource
win10v2004-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
ChatGPT Image 7 Eyl 2026 21_29_10.png
Resource
win10ltsc2021-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
ChatGPT Image 7 Eyl 2026 21_29_10.png
Resource
win11-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
ChatGPT Image 7 Eyl 2026 21_29_10.png
Resource
macos-20250619-en
1 signatures
900 seconds
General
- Target ChatGPT Image 7 Eyl 2026 21_29_10.png
- Size 1.8MB
- Sample260907-y2maxsvfle
- SHA256 a0b646c989ba3b2cc2ed5e92fde8c07a3e7a2dd426ee23776f141ac6bcce00ee
- MD5 9ec7fdf368c390a39cb706b6d3fd0da4
- SHA1 2dd83a210b1ef063f5d7a74a1c5739dfd9a3682e
- SHA512 9a2b072896341c66b6a678fb2a0729ed5d39cd8ca3fd1584d2f37d68bb475f815fc7881c7ae3e564035beafb5bff45067a9f4b2c825ea80ca43e11161fef0625
- SSDEEP 49152:JkEP7LD3uj5GOos/XDdBHgS4tfIy9dywb:rLD3ujvos/XDdOttjtb
- TLSH T1AC9533F2A650C4E9F2031EFDA3ED4F797B336B710115F42A400F2769866B9A8161F1B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1980 mspaint.exe 1980 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1980 mspaint.exe 1980 mspaint.exe 1980 mspaint.exe 1980 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\ChatGPT Image 7 Eyl 2026 21_29_10.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1980
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2340