Overview
overview
8Static
static
1§8§lSmal...ir.zip
windows10-2004-x64
1§8§lSmal...ir.zip
windows11-ltsc_2024-x64
1assets/min...ir.png
windows10-2004-x64
1assets/min...ir.png
windows11-ltsc_2024-x64
1pack.mcmeta
windows10-2004-x64
3pack.mcmeta
windows11-ltsc_2024-x64
8pack.png
windows10-2004-x64
1pack.png
windows11-ltsc_2024-x64
8Analysis
- user interaction
yes - max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/07/2026, 15:30
Static task
static1
Behavioral task
behavioral1
Sample
§8§lSmall crosshair.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
§8§lSmall crosshair.zip
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
assets/minecraft/textures/gui/sprites/hud/crosshair.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
assets/minecraft/textures/gui/sprites/hud/crosshair.png
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
pack.mcmeta
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
pack.mcmeta
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
pack.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
pack.png
Resource
win11ltsc2024-20260629-en
General
- Target assets/minecraft/textures/gui/sprites/hud/crosshair.png
- Size 114B
- Sample260705-sxrf7agy6n
- SHA256 85210a9ae6112fab18f80bac5d592bfd4628a5b8173953b52c6814f5245309c9
- MD5 3c4da8aa5fda7ac9c6f1a3dde1f56206
- SHA1 e7ac830dc457dbb8adff639af7733a54d28a77f5
- SHA512 363ea2f6c12f90f6c474558700c960aa06eede848f214d37f121473041f5e1f572dd3f2e349d101bc7f5f178f6aa084b37f33ee282227a0a1dbb30a155e23170
- TLSH T1BCB092C29AA48A78C64207638A299A55E8B1C62C053E890480A4A6245C19D88C29A68F
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3564 mspaint.exe 3564 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3564 mspaint.exe 3564 mspaint.exe 3564 mspaint.exe 3564 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\assets\minecraft\textures\gui\sprites\hud\crosshair.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3564
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3636