Analysis
-
max time kernel
1199s -
max time network
1219s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
02-02-2024 20:38
Static task
static1
Behavioral task
behavioral1
Sample
image_2024-02-03_093833388.png
Resource
win7-20231215-en
2 signatures
1200 seconds
General
-
Target
image_2024-02-03_093833388.png
-
Size
37KB
-
MD5
e61246bad3561d343da82aa75b7d4989
-
SHA1
e545f75226514f540b1ccde819b7351a65fd8dd9
-
SHA256
7639612c53d3fa5f745b0c97c181ced9989104fc8c4535774e4388efe71ffd52
-
SHA512
911521bc5c05084baf510621e0e1474e102d84a180e1314e306677ac6fe6925a9c3ea3bf01761bb4f739f3669cd79c5a30c14f2491c93d4eca775e5da7a2a2a3
-
SSDEEP
768:Mcg2YkE+oqxLlFJAEHJglw62U4ZbsJylEwmfbYlPwmqh:RjjEpqhGEHJglwtjlEZyPqh
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
rundll32.exepid process 1984 rundll32.exe