Analysis
-
max time kernel
149s -
max time network
161s -
platform
windows11-21h2_x64 -
resource
win11-20241023-fr -
resource tags
-
submitted
14-01-2025 20:43
General
-
Target
OblivionCheatVIP 2.1/Compilers/tinycc/include/limits.h
-
Size
2KB
-
MD5
5be6b04221366632fd3ea3110213676b
-
SHA1
5fc1f334ffe514780798f6178330f756bfcf9972
-
SHA256
395d8bf72ed91b83d512234089ae8a96d8a21e72f5fdcbd56af4aef6e1110c62
-
SHA512
1326d02376573e3bcdc9567c00d443d56b4f72b07452bf96f508f0f3a49c5e09c73e643b961aa5e47c212517002f8dabfd34afbb840cc09eafba1f6cb8edb7df
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\OblivionCheatVIP 2.1\Compilers\tinycc\include\limits.h"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx