352ac2d7a6cdb10fb5c337a3b37bdb82e201c9c3e0fb049052959a1fcefd1927 | Triage

Analysis

max time kernel
46s
max time network
58s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
05-02-2023 04:36

Sharing

Report Analysis Logs

General

Target

Xpadder/IMG/avjxvp.png
Size

140KB
MD5

e1c2a378272a8bfff3bbc796ebcfbdaf
SHA1

d4307ca02232e44eac1aabfd7b70152f79d3a7f5
SHA256

f3983b56f77cc2f1b7b585a31c4b2453b31f15d4a32eea1c653319f13dde3a18
SHA512

afd561fa2ef0d092a1ec3410ab7ed2d04e501e08c1b509b951f7ed26fdc208a1c8ab21c0eb0ff4d5f803d67c536ea677ac0c1023001f7b3823a1d50ab53bf869
SSDEEP

3072:uiwI2/Z5dmfpDa2AcnJa9PF5xCqYVgSXzzm62dRpG:uIM5cfpDfnJan0aSjzm3dvG

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Xpadder\IMG\avjxvp.png
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads