Resubmissions

06/07/2023, 18:35 UTC

230706-w8fqlsdg43 7

06/07/2023, 18:32 UTC

230706-w6mfdadg35 7

06/07/2023, 18:27 UTC

230706-w34kgsdg32 7

05/07/2023, 09:21 UTC

230705-lbqjfabd66 7

05/07/2023, 08:59 UTC

230705-kxxdfach7v 7

05/07/2023, 08:41 UTC

230705-klwmrscg9y 7

05/07/2023, 07:15 UTC

230705-h3aqhscf6z 7

05/07/2023, 07:13 UTC

230705-h2e9lsba95 7

05/07/2023, 06:50 UTC

230705-hl6fvscf2t 7

Analysis

  • max time kernel
    24s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    05/07/2023, 06:50 UTC

General

  • Target

    e0537.png

  • Size

    2KB

  • MD5

    2b8e15e3c5b30ee626deaaa04f6bd0ba

  • SHA1

    04fcd511f50187d070462c108ef126e10a90de7d

  • SHA256

    44074f2eb61774484fb90d2bdf3636faed1bb12cbf022673af91e01e4619319b

  • SHA512

    1101d686d77c8ecc3a750633a5acd3839b95da1a829672cebd728ba2bb23aad780740cb27e5a25e77f064ecc1636ff9de0151564c077407f755d49764b381d57

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\e0537.png
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:2292

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2292-54-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2292-55-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.