Overview
overview
3Static
static
3renpy/comm...ge.png
windows10-2004-x64
1renpy/comm...ge.png
windows11-ltsc_2024-x64
3renpy/comm...oy.png
windows10-2004-x64
1renpy/comm...oy.png
windows11-ltsc_2024-x64
1renpy/comm...rl.png
windows10-2004-x64
1renpy/comm...rl.png
windows11-ltsc_2024-x64
1renpy/comm...le.png
windows10-2004-x64
1renpy/comm...le.png
windows11-ltsc_2024-x64
1renpy/comm...fe.png
windows10-2004-x64
1renpy/comm...fe.png
windows11-ltsc_2024-x64
1renpy/comm...le.png
windows10-2004-x64
1renpy/comm...le.png
windows11-ltsc_2024-x64
1renpy/comm...le.png
windows10-2004-x64
1renpy/comm...le.png
windows11-ltsc_2024-x64
Resubmissions
20/07/2026, 21:02
260720-zvsd2aey2j520/07/2026, 20:54
260720-zpyc4aex2l320/07/2026, 20:47
260720-zk72qsgt6s20/07/2026, 20:23
260720-y6c8tad14m10Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/07/2026, 20:54
Static task
static1
Behavioral task
behavioral1
Sample
renpy/common/_missing_image.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
renpy/common/_missing_image.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
renpy/common/_placeholder/boy.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
renpy/common/_placeholder/boy.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
renpy/common/_placeholder/girl.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
renpy/common/_placeholder/girl.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
renpy/common/_transparent_tile.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
renpy/common/_transparent_tile.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
renpy/common/_tv_unsafe.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
renpy/common/_tv_unsafe.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
renpy/common/blindstile.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
renpy/common/blindstile.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
renpy/common/squarestile.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
renpy/common/squarestile.png
Resource
win11ltsc2024-20260709-en
General
- Target renpy/common/_placeholder/boy.png
- Size 74KB
- Sample260720-zpyc4aex2l
- SHA256 603c534f532b7e024a6bafd846e829ab17c0c5d749d47750753fa53e86c5e4a6
- MD5 341245fe7d31fdc1c5c302b121c2cb19
- SHA1 c34c80810da66c614ebfcc72a4d32d3fc64ee986
- SHA512 7c5bc0e87bcc842a4b9be87ffe30ed9e69daa6dcb3ec4aee83171f74537b4037b5975722e1f1a3573d676dd52b1fc8d43106e037bf54248122d2b08a5e524200
- SSDEEP 1536:xlLgDMaIhFCB3PLcfkW2I0jWZddpEBr3OimgBFpup0RIhZrKzz+tV:TLaMa6FI3zcHR0jWZEmgBHNKJK2/
- TLSH T1F6730244D032D19E3E171DF687A8CF17D5BB736971D6A860F254A23CCE8AE3019C399A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3836 mspaint.exe 3836 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3836 mspaint.exe 3836 mspaint.exe 3836 mspaint.exe 3836 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\renpy\common\_placeholder\boy.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3836
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4760