593c20dcf865d6b55cf7404869c92202071cb4d2972dc2784f96ff2730b59745 | Triage

Analysis

max time kernel
91s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 06:32

Sharing

Report Analysis Logs

General

Target

inexhaustive/waviness.jpg
Size

61KB
MD5

980e8d60a93e3fa912d4daffea779480
SHA1

b329eb8d42f798dcdd216d32654d90a3dc48385a
SHA256

98d87b782bf26c21c0c8ad62e402d0475e1f22fba96f02453d994b643b5be174
SHA512

a34bdd17ede8f6cc0701bae9064832e095e768a7ecf652218539de666d4443720585af57a55507bf9a6878d0752a6803980c0dc1741d7b2b079bd94da3e0b051
SSDEEP

1536:222UdBqBD/jJ+d7naXHqmljv86xsqeyB9mPg6gopzGIAF:n2UdBqBTtqGqiQ6xss3mPbgoJ8F

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\inexhaustive\waviness.jpg
1⤵
PID:3168

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...