Analysis
- user interaction
yes - max time kernel
24s - max time network
15s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/10/2026, 16:55
Static task
static1
Behavioral task
behavioral1
Sample
E.png
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
E.png
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target E.png
- Size 2.8MB
- Sample261024-ve34daa14x
- SHA256 0dd74d1984095709cc29b2b354c6394511bdc9cb567088be659889abc38d960e
- MD5 76b8cbe8a5739878370dbbda89733aee
- SHA1 0673f7e082f4614c1c68e4ed05e7560be4437ca2
- SHA512 a98e24db5cade1bd3be1d27d70cf7b52f6ec3265a30418daeeaf30c0fccc731ee64480bbacb38967c80588d2cc3f4b1778c9a159c9779fcb1f7b6068515747c5
- SSDEEP 49152:b+N6N95jip7UE62OHhQ8StzrPDJgxn/Bqox+VWq59TDX6L9/e0YQyUYaJtQf3lX:bf9wUE62KhW5PDs/14X59TD09PYQlYJx
- TLSH T167D533F7F92399A2E581B4F4B9C58F7E9B314B31360140F1802158F5E6E8DF19E0AE99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1956 mspaint.exe 1956 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1956 mspaint.exe 1956 mspaint.exe 1956 mspaint.exe 1956 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\E.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1956
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3488