Overview
overview
3Static
static
3Standable ...5].zip
windows10-2004-x64
1Standable ...5].zip
windows11-ltsc_2024-x64
1Standable ...LL.txt
windows10-2004-x64
1Standable ...LL.txt
windows11-ltsc_2024-x64
1Standable ...ME.txt
windows10-2004-x64
1Standable ...ME.txt
windows11-ltsc_2024-x64
1Standable ...nifest
windows10-2004-x64
3Standable ...nifest
windows11-ltsc_2024-x64
3Standable ...U.json
windows10-2004-x64
3Standable ...U.json
windows11-ltsc_2024-x64
3Standable ...e.json
windows10-2004-x64
3Standable ...e.json
windows11-ltsc_2024-x64
3Standable ...n.json
windows10-2004-x64
3Standable ...n.json
windows11-ltsc_2024-x64
3Standable ...s.json
windows10-2004-x64
3Standable ...s.json
windows11-ltsc_2024-x64
3Standable ...r.json
windows10-2004-x64
3Standable ...r.json
windows11-ltsc_2024-x64
3Standable ...a.json
windows10-2004-x64
3Standable ...a.json
windows11-ltsc_2024-x64
3Standable ...o.json
windows10-2004-x64
3Standable ...o.json
windows11-ltsc_2024-x64
3Standable ...u.json
windows10-2004-x64
3Standable ...u.json
windows11-ltsc_2024-x64
3Standable ...h.json
windows10-2004-x64
3Standable ...h.json
windows11-ltsc_2024-x64
3Standable ...pi.dll
windows10-2004-x64
1Standable ...pi.dll
windows11-ltsc_2024-x64
1Standable ...nd.png
windows10-2004-x64
1Standable ...nd.png
windows11-ltsc_2024-x64
1Standable .../C.png
windows10-2004-x64
1Standable .../C.png
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260911-fr - resource tags
arch:x64arch:x86image:win10v2004-20260911-frlocale:fr-fros:windows10-2004-x64systemwindows - submitted
29/10/2026, 22:22
Static task
static1
Behavioral task
behavioral1
Sample
Standable Full Body Estimation [Build 24d272065].zip
Resource
win10v2004-20260911-fr
Behavioral task
behavioral2
Sample
Standable Full Body Estimation [Build 24d272065].zip
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral3
Sample
Standable Full Body Estimation [Build 24272065]/HOW TO INSTALL.txt
Resource
win10v2004-20260911-fr
Behavioral task
behavioral4
Sample
Standable Full Body Estimation [Build 24272065]/HOW TO INSTALL.txt
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral5
Sample
Standable Full Body Estimation [Build 24272065]/README.txt
Resource
win10v2004-20260911-fr
Behavioral task
behavioral6
Sample
Standable Full Body Estimation [Build 24272065]/README.txt
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral7
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/driver.vrdrivermanifest
Resource
win10v2004-20260911-fr
Behavioral task
behavioral8
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/driver.vrdrivermanifest
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral9
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/Engwish UwU.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral10
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/Engwish UwU.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral11
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/de.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral12
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/de.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral13
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/en.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral14
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/en.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral15
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/es.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral16
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/es.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral17
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/fr.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral18
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/fr.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral19
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ja.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral20
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ja.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral21
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ko.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral22
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ko.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral23
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ru.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral24
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/ru.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral25
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/zh.json
Resource
win10v2004-20260911-fr
Behavioral task
behavioral26
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/localization/zh.json
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral27
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/openvr_api.dll
Resource
win10v2004-20260911-fr
Behavioral task
behavioral28
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/openvr_api.dll
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral29
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/resources/UI Themes/Blackhole/ui_background.png
Resource
win10v2004-20260911-fr
Behavioral task
behavioral30
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/resources/UI Themes/Blackhole/ui_background.png
Resource
win11ltsc2024-20260911-fr
Behavioral task
behavioral31
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/resources/UI Themes/C.png
Resource
win10v2004-20260911-fr
Behavioral task
behavioral32
Sample
Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/resources/UI Themes/C.png
Resource
win11ltsc2024-20260911-fr
General
- Target Standable Full Body Estimation [Build 24272065]/Standable Full Body Estimation/resources/UI Themes/Blackhole/ui_background.png
- Size 9.4MB
- Sample261029-2aqe2sft2x
- SHA256 a19a6da917bd365a6266b297fa14251c279ba77c3d847eceb3eb3973cad017e9
- MD5 955bd0084b05417b14b22bfeb6e4a410
- SHA1 1e910cae4bb8107f55b013514ef9795bddeee674
- SHA512 54712b14afc6de45011bcfda9936dd3e6d736436bbe53b27fb893286b20c06af714cf4b07cef239a7a283366442531482dce4b3747bf050b40defd7019418a90
- SSDEEP 196608:4cjuVgQo94GBc2iwdeq5zzuFcpJsK9xvRMSqf8dHFrjZBbnWU:/jQb/wnzuFcwK9xvWSqf8/ff
- TLSH T1AFA63395C2DD057EE63798A929EE53769CEF7912FBB0CC04A385FCD1694C1B06A9B300
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3480 mspaint.exe 3480 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3480 mspaint.exe 3480 mspaint.exe 3480 mspaint.exe 3480 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Standable Full Body Estimation [Build 24272065]\Standable Full Body Estimation\resources\UI Themes\Blackhole\ui_background.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3480
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1152