33c2ab5c1334a76074ccc354c73482873482d7ea97de805845429703026a6d5a | Triage

Analysis

max time kernel
51s
max time network
147s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
14/02/2023, 21:04

Sharing

Report Analysis Logs

General

Target

bowser.jpg
Size

340KB
MD5

a64418342492b1279fbc6c5eebc63919
SHA1

3cb22d56a676bc5b7152721e382d03f03cabdfcf
SHA256

33c2ab5c1334a76074ccc354c73482873482d7ea97de805845429703026a6d5a
SHA512

56124aab0b22f01f6320a296e449647d0adbb60053044a9b6f394b92c5533352fe2401e4ec3ea7271b087d85fba0e9ec64696f35a774758b214ae4605e2e0dba
SSDEEP

6144:5+JQGvbjE0P6nzoksoWEL7T+KWMYcOBfslUPQw3baboK9sUV1JQvN:AQUbD6nUksoWELP+KLYlBflPQub7NwYV

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\bowser.jpg
1⤵
PID:2684

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads