Overview
overview
3Static
static
1Simple Ars...k].zip
windows10-ltsc_2021-x64
3LICENSE
windows10-ltsc_2021-x64
3animation_...s.json
windows10-ltsc_2021-x64
3animation_...s.json
windows10-ltsc_2021-x64
3animation_...e.json
windows10-ltsc_2021-x64
3animation_...s.json
windows10-ltsc_2021-x64
3animations...e.json
windows10-ltsc_2021-x64
3animations...s.json
windows10-ltsc_2021-x64
3animations...k.json
windows10-ltsc_2021-x64
3animations...s.json
windows10-ltsc_2021-x64
3animations...e.json
windows10-ltsc_2021-x64
3animations...m.json
windows10-ltsc_2021-x64
3animations...e.json
windows10-ltsc_2021-x64
3animations...r.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3animations...t.json
windows10-ltsc_2021-x64
3animations...f.json
windows10-ltsc_2021-x64
3animations/test.json
windows10-ltsc_2021-x64
3animations...h.json
windows10-ltsc_2021-x64
3animations...n.json
windows10-ltsc_2021-x64
3entity/emp...y.json
windows10-ltsc_2021-x64
3entity/emp...2.json
windows10-ltsc_2021-x64
3entity/hea...y.json
windows10-ltsc_2021-x64
3entity/inv...y.json
windows10-ltsc_2021-x64
3entity/pla...y.json
windows10-ltsc_2021-x64
3font/glyph_E1.pdn
windows10-ltsc_2021-x64
3font/glyph_E1.png
windows10-ltsc_2021-x64
1Analysis
- max time kernel
149s - max time network
147s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
05/09/2026, 08:14
Static task
static1
Behavioral task
behavioral1
Sample
Simple Arsenal Resource Pack v0.6 [Base Pack].zip
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
LICENSE
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
animation_controllers/controller.animation.firearms.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
animation_controllers/controller.animation.firearms_attachables.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
animation_controllers/controller.animation.first_person_base.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
animation_controllers/controller.animation.magazine_attachables.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
animations/animation.first_person_base.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
animations/animation.magazines.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
animations/animation.pistol_slide_back.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
animations/animation.sounds.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
animations/animation.switch_firing_mode.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral12
Sample
animations/animation.switch_scope_zoom.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral13
Sample
animations/animation.test_entity.move.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral14
Sample
animations/animation.weeweejuice.hit_marker.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral15
Sample
animations/firearm/1animation.firearm_first_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral16
Sample
animations/firearm/2animation.firearm_reload_first_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral17
Sample
animations/firearm/3animation.firearm_reload_cock_first_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral18
Sample
animations/firearm/4animation.firearm_third_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral19
Sample
animations/firearm/5animation.firearm_reload_third_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral20
Sample
animations/firearm/6animation.firearm_reload_cock_third_person.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral21
Sample
animations/firearm/animation.shoot.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral22
Sample
animations/hide_stuff.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral23
Sample
animations/test.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral24
Sample
animations/third_person_no_crouch.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral25
Sample
animations/weeweejuice.player_outline.animation.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral26
Sample
entity/empty_test_entity.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral27
Sample
entity/empty_test_entity2.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral28
Sample
entity/head_hitbox_entity.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral29
Sample
entity/inventory_entity.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral30
Sample
entity/player.entity.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral31
Sample
font/glyph_E1.pdn
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral32
Sample
font/glyph_E1.png
Resource
win10ltsc2021-20260513-en
General
- Target font/glyph_E1.png
- Size 4KB
- Sample260905-j5devszfqg
- SHA256 023baa7dd6f21f1567fe87cdd88a58f224a2b2424daeda0996f3012425b49f84
- MD5 63a7e4520e52350a2d2e55af95a5cadf
- SHA1 e0339174fd7f57b85d1b4b5ae69bbeb0b535a5a6
- SHA512 7ea040071242b9cf6199c97459dfa3848911794e567082a9a294dca306684bd367e954a145def1f1d831dfcc65748bc145baab70d4a2dacff86b4aa088c41057
- SSDEEP 96:54/tjEidRQ8y/ypAdsveHxE9KsbvyATs+UoP65Im8C:54/tjnuOpAFxW6X+RG8C
- TLSH T17DA16D61D9B8E9DEC3B06A39050061F36E2594DC67CC13CA8764E8085A06FE5E8B3724
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4776 mspaint.exe 4776 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4776 mspaint.exe 4776 mspaint.exe 4776 mspaint.exe 4776 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\font\glyph_E1.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4776
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:5260