Overview
overview
3Static
static
12026101215...go.zip
windows10-2004-x64
12026101215...go.zip
windows11-ltsc_2024-x64
12026101218...go.eml
windows10-2004-x64
12026101218...go.eml
windows11-ltsc_2024-x64
11.png
windows10-2004-x64
11.png
windows11-ltsc_2024-x64
12.png
windows10-2004-x64
12.png
windows11-ltsc_2024-x64
1email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/10/2026, 21:35
Static task
static1
Behavioral task
behavioral1
Sample
202610121531_Re_ FES Government & Investment _ Detalles clave Panel 5 – Miércoles 7 de octubre⚡_jdengo.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
202610121531_Re_ FES Government & Investment _ Detalles clave Panel 5 – Miércoles 7 de octubre⚡_jdengo.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
20261012181313-Re_ FES Government & Investment _ Detalles clave Panel 5 – Miércoles 7 de octubre⚡-jdengo.eml
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
20261012181313-Re_ FES Government & Investment _ Detalles clave Panel 5 – Miércoles 7 de octubre⚡-jdengo.eml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
1.png
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
1.png
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
2.png
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
2.png
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
email-html-2.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
email-html-2.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
email-plain-1.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-en
General
- Target 2.png
- Size 112KB
- Sample261012-1ffbla1vhx
- SHA256 be138a75e3f2852c70c397f477e09098d137e0ff4a4323ad0379cf4e8d966d4d
- MD5 2c36fc5cca706921c18e114b0a1ee438
- SHA1 448ff7f90b10b1a3b0facb1f688f45c3249a5897
- SHA512 e8a699fd753faf91d5402838cfc72ba6ff72db46de093586a75902b7c2027feb586f82cf1ec4799270042514e32bf254af190dbcdbd31cd30967c5bc73d866cc
- SSDEEP 1536:FnKVOeMo+CQCHLeTYYK7MirlerP+093XUunD5nNd3tXmINtC8o/lQJdCUzMAM:FUOeaCQ2GCMGlS2CUutH3tWINEly8bAM
- TLSH T173B312E6393B14B9A17299D1622B1410355B8AF9D63D27AE13E111AC34F23AFED313E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2656 mspaint.exe 2656 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2656 mspaint.exe 2656 mspaint.exe 2656 mspaint.exe 2656 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\2.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2656
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4760