Analysis
- max time kernel
46s - max time network
37s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/10/2026, 07:14
Static task
static1
Behavioral task
behavioral1
Sample
17928260353374709618005926042069.jpg
Resource
win10ltsc2021-20260911-en
2 signatures
150 seconds
General
- Target 17928260353374709618005926042069.jpg
- Size 1.4MB
- Sample261024-h2phaaee33
- SHA256 273b65a1e73868c8348908dfe4173fa0a0e3e38a12cd9a68acd94b2841f2867a
- MD5 104f0a8baae965b55725c2034cf2e07d
- SHA1 cda25d03b626445b1c7ff0ce71cc59dbf105ff30
- SHA512 1b1cb0311921770064e1c411bcc51874cebbd54ea866c3b8b4a96c4dfe567b9a842bd3423ac115a87355451c7e18ba0bbc370038908a8f5be5c594381d856b9e
- SSDEEP 24576:JFJ0Ijx0cu+szabiR4pdeGc5Z4rHKibWLJbGZTuqKUslOunniGyMnFE:jxjrytZ6bWLJaZiqKDOzGyMy
- TLSH T1BA653359FA70BC44CB42ABBAE19530F13371DD596D0342FA228577D26C7B8E6CAD20D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 640 mspaint.exe 640 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 640 mspaint.exe 640 mspaint.exe 640 mspaint.exe 640 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\17928260353374709618005926042069.jpg"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:640
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4500