Overview
overview
3Static
static
1slayers-2-...ws.zip
windows10-2004-x64
1slayers-2-...ws.zip
windows11-ltsc_2024-x64
1slayers-2-...ch.bat
windows10-2004-x64
3slayers-2-...ch.bat
windows11-ltsc_2024-x64
3slayers-2-...up.bat
windows10-2004-x64
3slayers-2-...up.bat
windows11-ltsc_2024-x64
3slayers-2-...ngs.py
windows10-2004-x64
3slayers-2-...ngs.py
windows11-ltsc_2024-x64
3slayers-2-...pp.ico
windows10-2004-x64
3slayers-2-...pp.ico
windows11-ltsc_2024-x64
3slayers-2-...pp.png
windows10-2004-x64
1slayers-2-...pp.png
windows11-ltsc_2024-x64
1slayers-2-...ths.py
windows10-2004-x64
3slayers-2-...ths.py
windows11-ltsc_2024-x64
3slayers-2-...tor.py
windows10-2004-x64
3slayers-2-...tor.py
windows11-ltsc_2024-x64
3slayers-2-...rap.py
windows10-2004-x64
3slayers-2-...rap.py
windows11-ltsc_2024-x64
3slayers-2-...its.py
windows10-2004-x64
3slayers-2-...its.py
windows11-ltsc_2024-x64
3slayers-2-...ect.py
windows10-2004-x64
3slayers-2-...ect.py
windows11-ltsc_2024-x64
3slayers-2-...on.bat
windows10-2004-x64
3slayers-2-...on.bat
windows11-ltsc_2024-x64
3slayers-2-...sh.png
windows10-2004-x64
1slayers-2-...sh.png
windows11-ltsc_2024-x64
1slayers-2-...cle.py
windows10-2004-x64
3slayers-2-...cle.py
windows11-ltsc_2024-x64
3slayers-2-...use.py
windows10-2004-x64
3slayers-2-...use.py
windows11-ltsc_2024-x64
3slayers-2-...ons.py
windows10-2004-x64
3slayers-2-...ons.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/09/2026, 03:46
Static task
static1
Behavioral task
behavioral1
Sample
slayers-2-fishing-windows.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
slayers-2-fishing-windows.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
slayers-2-fishing-windows/Launch.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
slayers-2-fishing-windows/Launch.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
slayers-2-fishing-windows/Setup.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
slayers-2-fishing-windows/Setup.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
slayers-2-fishing-windows/src/advanced_settings.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
slayers-2-fishing-windows/src/advanced_settings.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
slayers-2-fishing-windows/src/app.ico
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
slayers-2-fishing-windows/src/app.ico
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
slayers-2-fishing-windows/src/app.png
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
slayers-2-fishing-windows/src/app.png
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
slayers-2-fishing-windows/src/app_paths.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
slayers-2-fishing-windows/src/app_paths.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
slayers-2-fishing-windows/src/area_selector.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
slayers-2-fishing-windows/src/area_selector.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
slayers-2-fishing-windows/src/bootstrap.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
slayers-2-fishing-windows/src/bootstrap.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
slayers-2-fishing-windows/src/credits.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
slayers-2-fishing-windows/src/credits.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
slayers-2-fishing-windows/src/detect.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
slayers-2-fishing-windows/src/detect.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
slayers-2-fishing-windows/src/find_python.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
slayers-2-fishing-windows/src/find_python.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
slayers-2-fishing-windows/src/fish.png
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
slayers-2-fishing-windows/src/fish.png
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
slayers-2-fishing-windows/src/fishing_cycle.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
slayers-2-fishing-windows/src/fishing_cycle.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
slayers-2-fishing-windows/src/free_mouse.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
slayers-2-fishing-windows/src/free_mouse.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
slayers-2-fishing-windows/src/input_actions.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
slayers-2-fishing-windows/src/input_actions.py
Resource
win11ltsc2024-20260911-en
General
- Target slayers-2-fishing-windows/src/app.png
- Size 512B
- Sample260928-ebp5cathpc
- SHA256 b6694b923fa8eb04e01516f24071241d97cff519ab35388cf06cbff0a4e5f865
- MD5 e8fe3665d3483c660721927822c731e7
- SHA1 3067920f2da07697250cb59e5b1e63f1d50dd9f8
- SHA512 0ed76e1ce85fc940b43c0a1f00efaea5b236b0548dec387d0c2448e5929886a5d3232840c7dc64807096278e8a42248ebc8e5f947342f06a3c0c74c1e087b5d2
- TLSH T141F00EC14B989BB0FD252D377940039084E2AA799C188335C14440E43C2F7D835AB1FF
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3916 mspaint.exe 3916 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3916 mspaint.exe 3916 mspaint.exe 3916 mspaint.exe 3916 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\slayers-2-fishing-windows\src\app.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3916
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2644