Analysis
- user interaction
yes - max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 10:47
Static task
static1
Behavioral task
behavioral1
Sample
_EXT_ Fwd_ Wezwanie do stawienia się od dnia 25_09_2026.msg
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
_EXT_ Fwd_ Wezwanie do stawienia się od dnia 25_09_2026.msg
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
15-15-15-15 (1).jpg
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
15-15-15-15 (1).jpg
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 15-15-15-15 (1).jpg
- Size 694KB
- Sample260925-mvnpmazwhy
- SHA256 91fed7563b7294d7c7b04ed48cec990ded45ea73dfc1cb86e36df3b68ab16fc7
- MD5 21eda71be9879abb900c1e505095df82
- SHA1 3d2f1c52091df119c7d7768559b8a65b996e7921
- SHA512 99b0fdeb62cbe89ee5252d29e4a0e3748e7423ec845eb0d9deaea1958ef9d0d756b0956c0e814f0a0b4644601291069b5663cce26f92331028cd93d0db387023
- SSDEEP 12288:CG8vS/D5/e1hGga7XoBP9/FkuV68hYLPpbqUZAze1aJ2o:lQStiGga7YF9/eMYLP5Z8eAwo
- TLSH T1F5E402179C198757A52C93E97D031EAC5F0A2B1CD6C67AEF15320E8B3A6C2264C9E13D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1084 mspaint.exe 1084 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1084 mspaint.exe 1084 mspaint.exe 1084 mspaint.exe 1084 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\15-15-15-15 (1).jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1084
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:8