Overview
overview
5Static
static
3Oblivity.rar
windows7-x64
3Oblivity.rar
windows10-2004-x64
3Oblivity/d...nifest
windows7-x64
3Oblivity/d...nifest
windows10-2004-x64
3Oblivity/s...90.acf
windows7-x64
3Oblivity/s...90.acf
windows10-2004-x64
3Oblivity/s...ly.dll
windows7-x64
1Oblivity/s...ly.dll
windows10-2004-x64
1Oblivity/s...ty.exe
windows7-x64
1Oblivity/s...ty.exe
windows10-2004-x64
5Oblivity/s...d1.caw
windows7-x64
3Oblivity/s...d1.caw
windows10-2004-x64
3Oblivity/s...d1.ecm
windows7-x64
3Oblivity/s...d1.ecm
windows10-2004-x64
3Oblivity/s...ws.sse
windows7-x64
3Oblivity/s...ws.sse
windows10-2004-x64
3Oblivity/s...d1.rgb
windows7-x64
3Oblivity/s...d1.rgb
windows10-2004-x64
3Oblivity/s...sc.sse
windows7-x64
3Oblivity/s...sc.sse
windows10-2004-x64
3Oblivity/s...d1.vis
windows7-x64
3Oblivity/s...d1.vis
windows10-2004-x64
3Oblivity/s...0a.caw
windows7-x64
3Oblivity/s...0a.caw
windows10-2004-x64
3Oblivity/s...0a.ecm
windows7-x64
3Oblivity/s...0a.ecm
windows10-2004-x64
3Oblivity/s...ws.sse
windows7-x64
3Oblivity/s...ws.sse
windows10-2004-x64
3Oblivity/s...0a.rgb
windows7-x64
3Oblivity/s...0a.rgb
windows10-2004-x64
3Oblivity/s...sc.sse
windows7-x64
3Oblivity/s...sc.sse
windows10-2004-x64
3Analysis
-
max time kernel
115s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25-09-2024 18:12
Static task
static1
Behavioral task
behavioral1
Sample
Oblivity.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Oblivity.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Oblivity/depotcache/1389991_7145957302409288600.manifest
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Oblivity/depotcache/1389991_7145957302409288600.manifest
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Oblivity/steamapps/appmanifest_1389990.acf
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Oblivity/steamapps/appmanifest_1389990.acf
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Oblivity/steamapps/common/Oblivity/GameAssembly.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Oblivity/steamapps/common/Oblivity/GameAssembly.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Oblivity/steamapps/common/Oblivity/Oblivity.exe
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Oblivity/steamapps/common/Oblivity/Oblivity.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.caw
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.caw
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.ecm
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.ecm
Resource
win10v2004-20240910-en
Behavioral task
behavioral15
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.iws.sse
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.iws.sse
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.rgb
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.rgb
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.rsc.sse
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.rsc.sse
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.vis
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/7d/7dd7669427274c83815459e30760b2d1.vis
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.caw
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.caw
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.ecm
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.ecm
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.iws.sse
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.iws.sse
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.rgb
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.rgb
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.rsc.sse
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Oblivity/steamapps/common/Oblivity/Oblivity_Data/GI/level4/d0/d06ee7eda6916184a427fef9cc7ee30a.rsc.sse
Resource
win10v2004-20240802-en
General
-
Target
Oblivity/steamapps/appmanifest_1389990.acf
-
Size
718B
-
MD5
e914331a9865679a3099a1260a8235ed
-
SHA1
7a20b9274c41cef615aadb87d58a77561102518a
-
SHA256
fc0dbfa55afde4cd391a7513d25c183f7b0b1de136677677a4ff00709a9dd07d
-
SHA512
f48610257df94d7102eb7bb3f2bdf20a7028c04109ba8d731e62652bf40c5bbf6bef1d52fb8348319465b68cc1dbce87ecfff3e58bf487960062ae8c7c675596
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-2170637797-568393320-3232933035-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1228 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Oblivity\steamapps\appmanifest_1389990.acf1⤵
- Modifies registry class
PID:540
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1228