Overview
overview
9Static
static
3MATLAB_R20...up.exe
windows10-2004-x64
5MATLAB_R20...up.exe
windows11-ltsc_2024-x64
4$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.bmp
windows10-2004-x64
1$PLUGINSDI...er.bmp
windows11-ltsc_2024-x64
1$PLUGINSDI...rd.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$TEMP/mpm.exe
windows10-2004-x64
9$TEMP/mpm.exe
windows11-ltsc_2024-x64
9Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 14:00
Static task
static1
Behavioral task
behavioral1
Sample
MATLAB_R2025b_Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MATLAB_R2025b_Setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$TEMP/mpm.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$TEMP/mpm.exe
Resource
win11ltsc2024-20260911-en
General
- Target $PLUGINSDIR/modern-header.bmp
- Size 25KB
- Sample261002-rbbm6sssdt
- SHA256 fcf07d3e647b0cf3947c8de3b2670a6c48fc6c878a44e5796b7ab8d1fddf2b51
- MD5 be5e232872a18404468bb43791c81770
- SHA1 ba3c120133693f4ce2c5e894ee7fab73856b2bfb
- SHA512 e867b91e63a22107d51ae3901c756317fec5fdd4125fe400b14c0e996b0658df54582a294cf2c1a0f54b7df8585f327f64af06a5bea5e69e00ca48ef79dd703a
- SSDEEP 96:OCXc029q8iWJrmaescIOOeeuGnMMJvcy+NrMwzGA0mpi0tXNH2b3U:OCT2Y8iWQIOYvcJNtdiy9H2b3U
- TLSH T1A7C219D5BA32E899A34D0BB1185FE9887655C78E174F131D70A76C80F2363593C4E3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5036 mspaint.exe 5036 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5036 mspaint.exe 5036 mspaint.exe 5036 mspaint.exe 5036 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\modern-header.bmp"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5036
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4464