Analysis
-
max time kernel
138s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18/08/2024, 12:39
General
-
Target
resources/luascripts/animations/levitate.lua
-
Size
212B
-
MD5
648e324c30233817a5e8beba883ec83b
-
SHA1
361e263c1a83419d3697de6ddb95499ac944f732
-
SHA256
0f471cb5527e96ed48ed21f59714b78c64c944d528d65109946d8f91e0d76792
-
SHA512
268a9e099330594f910fd2667a64d323b502c835849f644932515e927c86745393a1832e837da6678a980e4d2abeeb08f318fcc221c0fc278704b79328ef02ae
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\resources\luascripts\animations\levitate.lua1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx