Analysis
-
max time kernel
121s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12/02/2024, 19:50
General
-
Target
simfphys_armed-master/lua/effects/simfphys_sherman_muzzle.lua
-
Size
3KB
-
MD5
1e626189681a26e3c721573e741967f7
-
SHA1
031a89600c9cc25008aff686732b957c4e5a9c1e
-
SHA256
ddeb53f2907a0ea0998e125b0a103e3b66c830634488e9931a6c13b391453a19
-
SHA512
7e38cc4e9c1e5d40ccaf96a7c2f0a53be06ecaa941b5f6c06196d75e895dd13ab4776fefbd330a21401cb8bdced5e3130bdda8495e2274ce82a3d235177cc2a5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\simfphys_armed-master\lua\effects\simfphys_sherman_muzzle.lua1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx