Overview
overview
3Static
static
1lilith_rbx...al.rar
windows10-2004-x64
1lilith_rbx...al.rar
windows11-21h2-x64
1README.md
windows10-2004-x64
3README.md
windows11-21h2-x64
3deps/clipp...Load.h
windows10-2004-x64
3deps/clipp...Load.h
windows11-21h2-x64
3deps/clipp...Save.h
windows10-2004-x64
3deps/clipp...Save.h
windows11-21h2-x64
3deps/clipp...lors.h
windows10-2004-x64
3deps/clipp...lors.h
windows11-21h2-x64
3deps/clipp...tils.h
windows10-2004-x64
3deps/clipp...tils.h
windows11-21h2-x64
3deps/clipp...imer.h
windows10-2004-x64
3deps/clipp...imer.h
windows11-21h2-x64
3deps/clipp....svg.h
windows10-2004-x64
3deps/clipp....svg.h
windows11-21h2-x64
3deps/clipp...core.h
windows10-2004-x64
3deps/clipp...core.h
windows11-21h2-x64
3deps/clipp...gine.h
windows10-2004-x64
3deps/clipp...gine.h
windows11-21h2-x64
3deps/clipp...port.h
windows10-2004-x64
3deps/clipp...port.h
windows11-21h2-x64
3deps/clipp...pper.h
windows10-2004-x64
3deps/clipp...pper.h
windows11-21h2-x64
3deps/clipp...wski.h
windows10-2004-x64
3deps/clipp...wski.h
windows11-21h2-x64
3deps/clipp...fset.h
windows10-2004-x64
3deps/clipp...fset.h
windows11-21h2-x64
3deps/clipp...clip.h
windows10-2004-x64
3deps/clipp...clip.h
windows11-21h2-x64
3deps/clipp...sion.h
windows10-2004-x64
3deps/clipp...sion.h
windows11-21h2-x64
3Analysis
- max time kernel
898s - max time network
533s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
lilith_rbx_external.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
lilith_rbx_external.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
README.md
Resource
win10v2004-20250619-en
Behavioral task
behavioral4
Sample
README.md
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
deps/clipper2/include/clipper2/Utils/ClipFileLoad.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
deps/clipper2/include/clipper2/Utils/ClipFileLoad.h
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
deps/clipper2/include/clipper2/Utils/ClipFileSave.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
deps/clipper2/include/clipper2/Utils/ClipFileSave.h
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
deps/clipper2/include/clipper2/Utils/Colors.h
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
deps/clipper2/include/clipper2/Utils/Colors.h
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
deps/clipper2/include/clipper2/Utils/CommonUtils.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
deps/clipper2/include/clipper2/Utils/CommonUtils.h
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
deps/clipper2/include/clipper2/Utils/Timer.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
deps/clipper2/include/clipper2/Utils/Timer.h
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
deps/clipper2/include/clipper2/Utils/clipper.svg.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
deps/clipper2/include/clipper2/Utils/clipper.svg.h
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
deps/clipper2/include/clipper2/clipper.core.h
Resource
win10v2004-20250619-en
Behavioral task
behavioral18
Sample
deps/clipper2/include/clipper2/clipper.core.h
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
deps/clipper2/include/clipper2/clipper.engine.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
deps/clipper2/include/clipper2/clipper.engine.h
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
deps/clipper2/include/clipper2/clipper.export.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
deps/clipper2/include/clipper2/clipper.export.h
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
deps/clipper2/include/clipper2/clipper.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
deps/clipper2/include/clipper2/clipper.h
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
deps/clipper2/include/clipper2/clipper.minkowski.h
Resource
win10v2004-20250619-en
Behavioral task
behavioral26
Sample
deps/clipper2/include/clipper2/clipper.minkowski.h
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
deps/clipper2/include/clipper2/clipper.offset.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
deps/clipper2/include/clipper2/clipper.offset.h
Resource
win11-20250502-en
Behavioral task
behavioral29
Sample
deps/clipper2/include/clipper2/clipper.rectclip.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
deps/clipper2/include/clipper2/clipper.rectclip.h
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
deps/clipper2/include/clipper2/clipper.version.h
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
deps/clipper2/include/clipper2/clipper.version.h
Resource
win11-20260130-en
General
- Target deps/clipper2/include/clipper2/clipper.version.h
- Size 126B
- Sample260511-pahzrag15w
- SHA256 124189ed3b71a705c04e81abf645a57d3d3e525dc1b1d9518e524c000c341bd2
- MD5 192ed4d9361cee85cd4b0eb82705e28e
- SHA1 9c5f69b3740c5eb56aa31ab2eff3e76d9e69d5dc
- SHA512 725a4911119bcd95108f52e07318174e52410f71254b89b9f28679a8599d39c7de62ded46c745392b77d7679ea1964bda55260b7ee607e33a381a726e6642204
- TLSH T1CFB092221C69E0E4008CA4F200037400200CFE1263378BC8F00570C92E68C5C039C744
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3064 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\deps\clipper2\include\clipper2\clipper.version.h1⤵
- Modifies registry class
PID:5360
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3064