3952873719ebe020a1a4207f8c20adc4e025c8a9eeb787edfd45bd0b771b3d1c | Triage

Analysis

max time kernel
77s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
18/09/2022, 13:32

Sharing

Report Analysis Logs

General

Target

Discord-QR-Token-Logger-main/resources/overlay.png
Size

974B
MD5

c67a59cc622419e6f50f66c5edb2a9f5
SHA1

400774823f960c427e6dc51c5b19bd0f88e2b6ab
SHA256

7ff5743333f1b0ebf8cb1b70a89d584309b4b7ed4bae7f618e8f1974ec99b1cc
SHA512

36628476a2b4ec68d3918e0325ee17315c7c4c0d0f3479312d32079b5323aabd74004f31a8bb34d6803634a717ec0c5d4c3ee7f0634e47a2b1d5d142dd2cd4ef

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Discord-QR-Token-Logger-main\resources\overlay.png
1⤵
PID:3084

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads