692ad829cb6c9788998acb106ea4d8311e432c866d082ac3cc117166ac50080d | Triage

Resubmissions

05-06-2022 15:10

220605-sj6zqabfd5 8

02-06-2022 19:49

220602-yjvvcabad9 10

Analysis

max time kernel
90s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
02-06-2022 19:49

Sharing

Report Analysis Logs

General

Target

Scan_139.jpg
Size

88KB
MD5

f9b2333cc7e93568486a672225f2dd69
SHA1

c0143893cd2461fb2dc2c84330c1bf469dc93c34
SHA256

7e3875bf31005d9d352d9b029e4364df19dccf6c77f16539ca974f224a30347c
SHA512

d30732aba584782ef2783f388ca9183f9c4b02ec6b3e8741a91fae152f2bae19b655a53d19fc2cdbf85a0da3621d0de6c50129435b6ba937a083416d2d22c7f1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Scan_139.jpg
1⤵
PID:4860

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...