Analysis
- max time kernel
898s - max time network
475s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/09/2026, 16:50
Static task
static1
Behavioral task
behavioral1
Sample
4.jpg
Resource
win10v2004-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
4.jpg
Resource
win10ltsc2021-20260911-en
2 signatures
900 seconds
General
- Target 4.jpg
- Size 66KB
- Sample260924-vb93hsxble
- SHA256 e07f87fc4889ca2451580f49dcf496686b49640c7e0d2520187156705b70e8b7
- MD5 0910b0537a68287dfffe1a2ed1cb0e8a
- SHA1 9326997d05453c69790cc98233d03161a5e4c15c
- SHA512 3bc6a400b25b2350aef485420c84daf2893baad6ff60f280199ff8f43d1a16c8686875437c16a11400991e7ec8b957107029557ff4e3e9813adceaf3dd8eb31b
- SSDEEP 1536:jQaIs0sMhIawseC3YtRfkwHBXyJx9itaWIq8Aq2IV+j73s22xb:jdzMOawOwhXyJx9ikWEtm78Db
- TLSH T1D36301464F0ADDB6FA98DC9ACB102D0DC276AC7C21D015EDCA214514E76B1A8FA2FD4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4100 mspaint.exe 4100 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4100 mspaint.exe 4100 mspaint.exe 4100 mspaint.exe 4100 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\4.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4100
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4588