f5d596e7487648ec9a72fc0070928a4bcb4cece4274f42009e8001580ff3b5ab | Triage

Resubmissions

19/02/2024, 04:29

240219-e399lahh25 3

19/02/2024, 04:26

240219-e2m3nshg96 5

19/02/2024, 04:23

240219-ezwl2ahe6z 5

Analysis

max time kernel
46s
max time network
55s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
19/02/2024, 04:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Imagen de WhatsApp 2024-02-18 a las 14.48.17_ae90a7eb.jpg
Size

137KB
MD5

bda15447362c703ad3cdf4b18581aede
SHA1

859a101ef69637ca393c7e9b3463b2363559de6a
SHA256

f5d596e7487648ec9a72fc0070928a4bcb4cece4274f42009e8001580ff3b5ab
SHA512

51f412129614f23360629a0af37790eeb4fb63e4164fdd652d2e4ac259a7d2c209603adc1ea46b8d3b8fc8f7da9ca52abf1b5c671da219a5465a3ad688bec9f6
SSDEEP

3072:PmwNlP1ISEFMqp1nk+eV5QaV4Eiv9pBTJB4UvzesfOHQ5PZCss9VOw:xNlPOSNk1d05Qdv9Lv4UvXfvJgsoVOw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Imagen de WhatsApp 2024-02-18 a las 14.48.17_ae90a7eb.jpg"
1⤵
PID:3356

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads