bba64a170a7f42f92971a99d1189e5adff3f587501530ff7565031627e94dffa | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
12-01-2023 16:44

Sharing

Report Analysis Logs

General

Target

.309j.png
Size

52KB
MD5

5c3f048448cc2583bbde9d08937bf397
SHA1

37732c7f1ce24e3d65567b63c0a210fba1842108
SHA256

616999b3de2904e819958277a5203b9f558dd091378b60e10f57903bd7203bc6
SHA512

afdee189594697609c8ac90a0ced98c6be79db1b82373348366c675286b577a1793ac95789dd5093baca1bad391c0868ece4ba52950d586c51fb180106dea40a
SSDEEP

1536:pvHspmUAi7mtxmip8B6En3Ve61oyo0M5JK7S:p/sp3mtjp8BtVeioyE5b

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\.309j.png
1⤵
PID:2356

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads