Analysis

  • max time kernel
    105s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-09-2024 14:55

General

  • Target

    Lillian_Night_Succubus_Exclusive_Contract-v1.2.0.7z

  • Size

    490.1MB

  • MD5

    7f3603b7bc61ef28152b469dee518697

  • SHA1

    8680d7d4df2af8002d8d29644db2723c524c6086

  • SHA256

    69943738a2f0a000191138d02b8b2395c0a110027e801da8f6a2a4ff78861c3d

  • SHA512

    e64646e02eb5642feb925e78b6a56a6824ecbd3de0c4a3eff6b0419a4e87ea7fa805caf83577d01ebdcdcc719b47f4b16c28c4c93cab6bca46d2352287621808

  • SSDEEP

    12582912:JjgQcxnRbHCFJ0IeHceU4jGRz1SG9kfqQ9gGk:JLCntOYHCjpOCQ9gGk

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Lillian_Night_Succubus_Exclusive_Contract-v1.2.0.7z
    1⤵
    • Modifies registry class
    PID:1656
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads