Analysis
-
max time kernel
124s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 18:12
General
-
Target
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.vis
-
Size
310KB
-
MD5
78a7dd4992411533437ce973ca2a17e3
-
SHA1
43e4c80ca0321d2f7796fe076cf77c7beca58a1f
-
SHA256
553e8d2dff288a280ab41466eb6aae3567965cbab6628796501ad9870c22eae0
-
SHA512
9efb51a2fa0e4608f8a15c978798dc1e014f29a744804edd9d0a538d74b8b34d0cd53b0994ed9bd45a283dac59dfd8385dc0ba87c2cc1b13990024c44162e367
-
SSDEEP
768:onOODOODCCjVOODOOPCCjXOODOODCCjZODOODCCjCcOODOODCCjw:ol
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Oblivity\steamapps\common\Oblivity\Oblivity_Data\GI\level4\7d\7dd7669427274c83815459e30760b2d1.vis1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx