466cf0832a24b9a900aa36431f7fd69647c172c1c8054e233c473e83e50aa18f | Triage

Submit
Reports

Overview

overview

7

Static

static

1

GlyceriaHa...ee.jpg

windows7-x64

3

GlyceriaHa...ee.jpg

windows10-2004-x64

3

Mainprizer...nd.lnk

windows7-x64

3

Mainprizer...nd.lnk

windows10-2004-x64

3

StanesBese...ly.cmd

windows7-x64

3

StanesBese...ly.cmd

windows10-2004-x64

7

StanesBese...ne.jpg

windows7-x64

3

StanesBese...ne.jpg

windows10-2004-x64

3

chuhraFond...ia.wsf

windows7-x64

3

chuhraFond...ia.wsf

windows10-2004-x64

7

chuhraFond...le.exe

windows7-x64

chuhraFond...le.exe

windows10-2004-x64

1

Analysis

max time kernel
135s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24-03-2023 11:23

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

GlyceriaHaberdine/possessinglyBingee.jpg

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

GlyceriaHaberdine/possessinglyBingee.jpg

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

MainprizerMisapprehendSeastrand.lnk

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

MainprizerMisapprehendSeastrand.lnk

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

StanesBeseeches/Inquisitorially.cmd

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

StanesBeseeches/Inquisitorially.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

StanesBeseeches/Pseudoconhydrine.jpg

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

StanesBeseeches/Pseudoconhydrine.jpg

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

chuhraFondled/longeveEctocondyle/UndersortPodalgia.wsf

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

chuhraFondled/longeveEctocondyle/UndersortPodalgia.wsf

Resource

win10v2004-20230220-en

microsoft phishing

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

chuhraFondled/longeveEctocondyle/glycuresisPortionable.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

chuhraFondled/longeveEctocondyle/glycuresisPortionable.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

MainprizerMisapprehendSeastrand.lnk
Size

1KB
MD5

4a70fe97d9d875088349804a02ce13d9
SHA1

2aec9bfc67be00cbf17194c4c4b414ea3259ce94
SHA256

f2b77f5f16c71f007c234447ea1f9c976f84ab01080af3b1c4c4219fa7b287f8
SHA512

65b58c1d56c72519179ebce43532aa2fba6e75babd91fc2e04de45e27f3c35a2f71646f9bd6234bb921acf4a337697426d3049f75e234b7e6d77cafc2bfe6786

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MainprizerMisapprehendSeastrand.lnk
1⤵
PID:4112

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy