a56c7b3fc1a2def745c0c774e9184221d821c065e61f61a20b40344fa431f24d | Triage

Resubmissions

19/05/2023, 02:55

230519-deyefseg24 3

19/05/2023, 02:52

230519-dc76waef99 1

Analysis

max time kernel
49s
max time network
64s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
19/05/2023, 02:55

Sharing

Report Analysis Logs

General

Target

GANG-Nuker/utilities/Avatars/GANG.png
Size

292KB
MD5

c8f94d22ce486c07a1fe48050f0949ec
SHA1

647d0327c7af7428167650060671e2ecba5f1ed5
SHA256

f7a931ef99512e0e4c4059295b356d2878c79549199aa6b5f4eae8d52dc5151f
SHA512

742a7b4b0e98e7c7b5e6184e2aac59195b7449e524be2b341575bc464f3bc5daadb4c3c58f825c6d88eadda911857400e1910701691dac236f7d8f2e7f490bae
SSDEEP

6144:Kx0mNIkEhwsZpttn9UiZzmczxR2Ur2bWXbLAH/A8OVT:KxzNlqwktt9bmczPKbWXbr

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\GANG-Nuker\utilities\Avatars\GANG.png
1⤵
PID:1444

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads