Analysis
-
max time kernel
62s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
11-07-2023 13:08
Static task
static1
Behavioral task
behavioral1
Sample
container/email_tracker_hidden[1].png
Resource
win10v2004-20230703-en
1 signatures
300 seconds
General
-
Target
container/email_tracker_hidden[1].png
-
Size
68B
-
MD5
978c1bee49d7ad5fc1a4d81099b13e18
-
SHA1
afcb011cfe6b924f202ee9544f17f631b32a01b1
-
SHA256
93ae7d494fad0fb30cbf3ae746a39c4bc7a0f8bbf87fbb587a3f3c01f3c5ce20
-
SHA512
81f251d1ca407945457425b681a96d1e7743706fafa47ace26f5f569e69337e9aaf726bff1a854b1a5a47a22e55c4bd285a4d21f695d126da631a1c891d10f48
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\container\email_tracker_hidden[1].png1⤵PID:1908
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4472