Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-10-2024 12:45
General
-
Target
resources/luascripts/animations/levitate.lua
-
Size
217B
-
MD5
d09da2b730602a59c3289b72e63137bb
-
SHA1
a8793635ae9ceddac54d1e6e6d27eb4938c4446a
-
SHA256
2af3980171cc17a4d7687b7489fe8b0bb193e5080c0ca76e5501983a0b3efadb
-
SHA512
21c0dafdd0f6d7ce7fa57b38ffd5af13bb9dc228bb466372e60f5d7c645895faecb81a55342b8abac1669e8c9b412d2b278cfeb1da65380b8876f809928b1b22
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\resources\luascripts\animations\levitate.lua1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx