352ac2d7a6cdb10fb5c337a3b37bdb82e201c9c3e0fb049052959a1fcefd1927 | Triage

Analysis

max time kernel
53s
max time network
147s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
05/02/2023, 04:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Xpadder/IMG/124afm0.png
Size

57KB
MD5

ebe02d41f9940bcab68eddbf7187b80b
SHA1

15266da629852ad25bfcf17fc03b1468a9d45a22
SHA256

4d5efb14545be001444f832d589b51ab0a37f6b466c220d0c7d53afab9bbebcf
SHA512

f1787b4050b7d3428dc9c9514c85cc7ac36fc4ef6b1424971c43b529d1563ab97f0147f71eba0bba2888fc3c2a69b09a436153ac42e01a1097a8a3f6cd27af54
SSDEEP

1536:j8UX8ViZU8q7V6ACUEfYVKLxU1f/mAQ0oNw0PgsGJ9bg:ge1ZUnBXEfG4xUJFoa0YX9E

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Xpadder\IMG\124afm0.png
1⤵
PID:2476

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads