Resubmissions
06-07-2023 18:35
230706-w8fqlsdg43 706-07-2023 18:32
230706-w6mfdadg35 706-07-2023 18:27
230706-w34kgsdg32 705-07-2023 09:21
230705-lbqjfabd66 705-07-2023 08:59
230705-kxxdfach7v 705-07-2023 08:41
230705-klwmrscg9y 705-07-2023 07:15
230705-h3aqhscf6z 705-07-2023 07:13
230705-h2e9lsba95 705-07-2023 06:50
230705-hl6fvscf2t 7Analysis
-
max time kernel
25s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
-
submitted
05-07-2023 06:50
General
-
Target
e1439.png
-
Size
683B
-
MD5
7de7ae1190da0abde04cbfb77e6f5981
-
SHA1
5c3a84c97666db8853a36b02c6d2a1d199ac1243
-
SHA256
288de87d9a53fde87ab51e974f51452ee83ce894b35be4a110ed6decf0a4a8b0
-
SHA512
8579db7339fc789dc865b326a809f0552d263992ad3a8b0dbe60c3ef7e7322a50a902027124f502d405929415f03955bed93b82c5dbb7bf4812da838ab84e1f3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\e1439.png1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB