Overview
overview
3Static
static
3SurvivalBe...ge.zip
windows10-ltsc_2021-x64
1manifest.json
windows10-ltsc_2021-x64
3overrides/...erties
windows10-ltsc_2021-x64
3overrides/...erties
windows10-ltsc_2021-x64
3overrides/...u.json
windows10-ltsc_2021-x64
3overrides/...s.json
windows10-ltsc_2021-x64
3overrides/...ap.txt
windows10-ltsc_2021-x64
1overrides/icon.png
windows10-ltsc_2021-x64
1overrides/....1.jar
windows10-ltsc_2021-x64
1overrides/options.txt
windows10-ltsc_2021-x64
1Analysis
- max time kernel
898s - max time network
473s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
13/11/2026, 04:36
Static task
static1
Behavioral task
behavioral1
Sample
SurvivalBetter-CurseForge.zip
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
manifest.json
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
overrides/config/iris.properties
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
overrides/config/lithium.properties
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
overrides/config/modmenu.json
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
overrides/config/sodium-options.json
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
overrides/config/xaerominimap.txt
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
overrides/icon.png
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
overrides/mods/ConfigLoader-1.21.1.jar
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
overrides/options.txt
Resource
win10ltsc2021-20260911-en
General
- Target overrides/icon.png
- Size 518KB
- Sample261113-e8qgdags2r
- SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
- MD5 ccc5325d4fcf8820b6273b12f133f684
- SHA1 d1c4d234a36ff2c5c7b39cb50dc4a2fa2c5ceea2
- SHA512 c5e26001532ed39ed4377ea657c5a0f8fd6b6f087db7b8562f5b468e0f63deceaeba5316f99e925b8ef79b02cd2ca569a4c6519a9838d1fa702b7b08078a3f3f
- SSDEEP 12288:P/ynDkH3qPBCzm99K2RZ2NcuUrLJ8KYej1MXiY:PX3qJCzuK2RZkcuUrFRj16
- TLSH T11AB4238B76385EA2F633F23BCEEA4045E6055FA1D3328B4515E9EB583267F7C1186708
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2740 mspaint.exe 2740 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2740 mspaint.exe 2740 mspaint.exe 2740 mspaint.exe 2740 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\overrides\icon.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2740
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1804