cb29eb9bf7a1fa4ea45b89617add4eee5fefa37e330e157721415406b713ba98 | Triage

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
31-03-2022 04:57

Sharing

Report Analysis Logs

General

Target

UID 1-.jpg
Size

80KB
MD5

8a1e0935938e2782f58793639a7e0c60
SHA1

e5e7dc80a14fae15ae9050f2cb35a93c14bbb1d0
SHA256

7373afd863d479a9bf0554946e6ec676a680c0b1083087e6a67ddaeb6af67215
SHA512

aabf4d4e6383cbb9a499dc76cbfc0ad2967d8bfc07737a0974b877b3cba5b9fa93288e26f8507d479677d659599bd3b6c28abb9ae23d23a6c7b910a2eb600e5b

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\UID 1-.jpg"
1⤵
PID:1780

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...