Analysis
-
max time kernel
882s -
max time network
885s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
13-06-2023 20:40
Static task
static1
Behavioral task
behavioral1
Sample
homemade-french-fries-5.jpg
Resource
win7-20230220-en
2 signatures
1200 seconds
Behavioral task
behavioral2
Sample
homemade-french-fries-5.jpg
Resource
win10v2004-20230220-en
15 signatures
1200 seconds
General
-
Target
homemade-french-fries-5.jpg
-
Size
82KB
-
MD5
f0ae06ee74654e308f7ebe201ddf1c03
-
SHA1
f82370acb961bc28ede2a6cf84f8f673a5fa9f4c
-
SHA256
ef9d76cc738138060eb57c03d023d80f3ab1da232205cf919dd34318ec1a1de3
-
SHA512
420501ea2284d5f115839a922f962729cc18ff4ed13f216adee539c1b1baea712de25fa0e0ce48a531ca7af59f2b5e44086f95296511861c32a5f52cb1097d7a
-
SSDEEP
1536:M8GviDWZm/vL4uzNkBdBZrO2+TC4PMUGXj8WPwqR7g+yy3iX0URhGUctWu2MdGZh:YiDv/vlWBdjrOfeFz8Tq5g1miX0AwWuI
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rundll32.exepid process 1720 rundll32.exe