69f1f5acffae5cdf075d9b9f4004bb5c70e80bfd68a3ea4597a24b96272158a0 | Triage

Analysis

max time kernel
89s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2023 13:03

Sharing

Report Analysis Logs

General

Target

assets/characters/amuleto/amuletoangry_glasses.jpg
Size

23KB
MD5

5c909f7e4d40cf6f50001a09b941ec16
SHA1

e4826d3bbc4dec73bc38934aab26119aa8b6e981
SHA256

45739572a2dc1374d0cc8cdaaffc8db0b6ab42a554cee77ef868d35ceec5d5fb
SHA512

b2508d92d374614fd60c3de9203d78f7e1f558a411be2e4c024bc9c802e2f45207341d979c4d493932449b30d2b14b5b11bafba9a540b2496fc118bdc086d88e
SSDEEP

384:RQYz1VxgbSq4dYUq2dh+ART+7YOWIpjGybEwSfjy7cXZZzi3X:RQ+VqSfdlrh+ARjyjv57cXZJo

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\assets\characters\amuleto\amuletoangry_glasses.jpg
1⤵
PID:4856

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads