9eae78ead9c8bcd9ee412e36d56f0825216d2ee0bd4e5e0a4a9b0d4133073adb | Triage

Analysis

max time kernel
103s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 19:36

Sharing

Report Analysis Logs

General

Target

thumbnail_image.png
Size

15KB
MD5

d994addf418cb16ef9fd337722d35210
SHA1

4cd08db19b5b0c368718a50dc40979a5228a29cd
SHA256

9eae78ead9c8bcd9ee412e36d56f0825216d2ee0bd4e5e0a4a9b0d4133073adb
SHA512

2dec54d00e9db3e5c4d2c8b3c00254dda20178c2b53a72bde0916ac3e429713fa9210ca0f38eba58f783ac7227b523897df6afa25046efb147a01d77c8e7415e
SSDEEP

384:lc3Nlw+icrMFK0edM/vO18tZUTLp0VI01PFYRy0S:lczwTaaKNyO1G+vp0fzH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\thumbnail_image.png
1⤵
PID:1316

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads