Analysis
- user interaction
yes - max time kernel
898s - max time network
425s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 00:10
Static task
static1
Behavioral task
behavioral1
Sample
Captura de tela 2026-10-17 212200.png
Resource
win10ltsc2021-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
Captura de tela 2026-10-17 212200.png
Resource
win10v2004-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
Captura de tela 2026-10-17 212200.png
Resource
win11-20260911-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
Captura de tela 2026-10-17 212200.png
Resource
win11ltsc2024-20260911-en
19 signatures
900 seconds
General
- Target Captura de tela 2026-10-17 212200.png
- Size 168KB
- Sample261102-agajmadf75
- SHA256 411e60d5bb41e87870a1c0c1be11d1d0b53df39c3a2b02da6d0d3ac00ed00416
- MD5 1476450c525459ea6c72a2f268006e0a
- SHA1 4acbd661373f40549f4e5764e0008b498970bcdb
- SHA512 98148c825585740dc259bd9b97bb3c31582a771b19afb7ecf5f062e1d34c9fbd4a42fab5270589c623caf7590f13fdd93330105fcefcec868bc1b5213efc8461
- SSDEEP 3072:97Ou2U6BB84AKK8OSlhXPHJha09VEmOUY5z2tPjSouJTY7g8HMGHiT9//d:97OvBK4AF+lVTXOU+z2neTYLHpHiT9nd
- TLSH T131F3F14ED5F3C28A4EDF21342419EF6BEF9B088326F562B5D2B5B14DC811C3E8510AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1304 mspaint.exe 1304 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1304 mspaint.exe 1304 mspaint.exe 1304 mspaint.exe 1304 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Captura de tela 2026-10-17 212200.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1304
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5432