Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 17:14
Static task
static1
Behavioral task
behavioral1
Sample
Cat.jpg
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cat.jpg
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Cat.jpg
- Size 139KB
- Sample260925-vr2q3ss17m
- SHA256 339516fcb7d8498abf389e11c41d89c3b5bcdb1d0b160be5628312cca16123c3
- MD5 bf75be116799b646e40b7e5007c78acc
- SHA1 242e37e04d420fb2a9f656b0ea3cfd6dfbf6c668
- SHA512 b17bbf77173cc85edc01d2faa4d1871a273ca16d3db3a2fc4980a33ca8e80a5483dc3c6299a6afb4a8c2d3f5891f1eb4cd84e0e5b104b9abd4b9d19c5e76a052
- SSDEEP 3072:CdF6PfBZGBQfi6TAnN0kueUT0xQnZQOe4OcGhO6z2UXLLS:MF63jGyVAnNts0Gh3vaO6zlL2
- TLSH T119E312A2812988B4F3D2CEA473D3859391AF0898EB751C2834E7DDCBA39DCDFD904519
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4356 mspaint.exe 4356 mspaint.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4356 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Cat.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4356
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3360