Analysis
-
max time kernel
88s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08/07/2024, 01:03
General
-
Target
FortniteV1.75/lunar-main/lunar.py
-
Size
3KB
-
MD5
a45496a29b717de77f5021fe208289b3
-
SHA1
aab06248728662b00d30f74799afa6e9b572b909
-
SHA256
d744e0f39faf49c3ec508cac85beb2d4b6a07171f0aa1a97ca2a50a00dc14a0b
-
SHA512
041551859e6d0d556fc040cbd95bdab815f7685c4db239bb92e4571649f7b7a54dbeef3b3da0af9f571cb5dddb7f54dab66a8fc2c6a2dc38f3020676483f3185
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\FortniteV1.75\lunar-main\lunar.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx