Analysis
-
max time kernel
129s -
max time network
141s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
27-07-2024 00:21
General
-
Target
Battlefield 2/NavMesh/navmeshControl.py
-
Size
3KB
-
MD5
63375c081051b936387ba8aab1971ed1
-
SHA1
6edb1f1dc2f5da256c67b64680601ff1a876e5fb
-
SHA256
8d99c5cb211052f1d728bd43e2117a1499e148edf3a471b09ac263029370a640
-
SHA512
180e6d47b1e6e2d0a54b349cb7ebb5693ce5edb1b7e641dd045c14d7eada8fa17f07bd1f9605f75b0365985474a5d49e0cc8ef438a0217a178efdee9de0ee4ce
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Battlefield 2\NavMesh\navmeshControl.py"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx