Resubmissions
22/09/2026, 23:17
260922-29txhstfmd822/09/2026, 16:58
260922-vgy77sah88322/09/2026, 16:32
260922-t135tsae376Analysis
- user interaction
yes - max time kernel
898s - max time network
576s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 23:17
Static task
static1
Behavioral task
behavioral1
Sample
Captura de tela 2026-09-15 133558.png
Resource
win11ltsc2024-20260911-en
37 signatures
900 seconds
Behavioral task
behavioral2
Sample
Captura de tela 2026-09-15 133558.png
Resource
win10v2004-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
Captura de tela 2026-09-15 133558.png
Resource
win10ltsc2021-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
Captura de tela 2026-09-15 133558.png
Resource
win11-20260911-en
0 signatures
900 seconds
General
- Target Captura de tela 2026-09-15 133558.png
- Size 1.8MB
- Sample260922-29txhstfmd
- SHA256 48cf8d58dad0532fe4fdd59ca9782f6a876d5ba7fcb87be99752596e9587af44
- MD5 1d39df83dd40361217a9e88a8fb3540a
- SHA1 8dbf4e0aff77b98e5a232db1137009a12016d253
- SHA512 ddc0487be9936cfa372b076880b86a6a334fccbc3da4846b60952a8a244f2fd1ee4893c29a24b0ba4a7628aa7ea56dd961eeaa43149d20dfc1a7a54cf0268369
- SSDEEP 49152:QkaqdLfsJEbfB9O4bfqvYob8phIJFPF2DIdUV:paQBfB0yCwk8/QVF20o
- TLSH T1728533AF2925D94929DB5E382438BFBEF6E3545D89FE5940ECA2339CE110871CCC919C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4540 mspaint.exe 4540 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4540 mspaint.exe 4540 mspaint.exe 4540 mspaint.exe 4540 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Captura de tela 2026-09-15 133558.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4540
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:6044