Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows11-21h2_x64 -
resource
win11-20241007-fr -
resource tags
-
submitted
14-01-2025 20:43
General
-
Target
OblivionCheatVIP 2.1/Compilers/tinycc/include/float.h
-
Size
1KB
-
MD5
7b3a9b2e219c615aa0d5476c5ec2e318
-
SHA1
e1658e94692f7e1f51a6fe13ecf03ca6e64474e9
-
SHA256
e2ed9e0e87505e9a679659373be768b757f31ce30538c49bb245f954f2ed766f
-
SHA512
7b1b60a1016082e89989e385e8763d7483dec13694b909549328925c3cf905b0690a3f0f2c2fe873e78feb2fe2dd54034c411901ffe056bdb7f990eb33bddf78
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\OblivionCheatVIP 2.1\Compilers\tinycc\include\float.h"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx