Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows11-21h2_x64 -
resource
win11-20241007-fr -
resource tags
-
submitted
14-01-2025 20:43
General
-
Target
OblivionCheatVIP 2.1/Addons/Zlib/6.5/login.json
-
Size
23B
-
MD5
1f27b170426a8afbab13c8fb9f0fda4d
-
SHA1
d4a1ee28812feec9f26de2696f58574f63bd71d6
-
SHA256
fc4d31fe0e2f82e79f8a257d579552dc6bde6f2477ec81f208debcec4aae40fd
-
SHA512
a46f917eef10bcb4695eac885ff4367a5e63536ac14cf4a59f91447e88b9830d2d351c05293516f0a2c937d118774128da09db045ac99788c6f4ee3211a60f44
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\OblivionCheatVIP 2.1\Addons\Zlib\6.5\login.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx