Resubmissions

06/10/2024, 12:47

241006-p1hfxayfqa 10

06/10/2024, 12:45

241006-pzch9syfmc 8

Analysis

  • max time kernel
    135s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/10/2024, 12:45

General

  • Target

    resources/luascripts/animations/walkthrough.lua

  • Size

    218B

  • MD5

    348e2fcfe114ef12e8db7ae75f24de15

  • SHA1

    97e1bca8ba3d1450db0af8d05fa741fe21a13e0f

  • SHA256

    10409b6d213db5683ec415fa1a8cde85b38fd057c9aa7b88c3fe4fbb19cd54b0

  • SHA512

    e545915d83d99f97b0e3cdf2353d877b5a4e91ec651d09cc8f659cb483fcecc4e14eb452140b3500a9fe34acaab4c733359a8d51f85d827f39ffff9b0b8ae9df

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\resources\luascripts\animations\walkthrough.lua
    1⤵
    • Modifies registry class
    PID:740
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads