Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01-12-2024 18:46
General
-
Target
LovelyCraftPistonTrap Win64 v.0.1-175/LovelyCraftPistonTrap_Data/RuntimeInitializeOnLoads.json
-
Size
2KB
-
MD5
859078fed0db39d36215495e653fe4a8
-
SHA1
bac43c655f9d91caca25598c2fd9aa8e2739a9e1
-
SHA256
1b06bffb1524d403c515c55337d760f227234d95024edbb12d24eae3ce7831e1
-
SHA512
115c5bb91f6f6590d97c1d4120c06b5bf8313935ce84321d9796a5bae1bf7c4e973ae325bbd774e43b05cd04452f25637950e86984f66b5d4507c77bc00934f0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\LovelyCraftPistonTrap Win64 v.0.1-175\LovelyCraftPistonTrap_Data\RuntimeInitializeOnLoads.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx