3f2d3f804b2ec5bd87c6facac593090ca47553e8f9a824c9911ad840b61cc113 | Triage

Resubmissions

23-02-2024 11:31

240223-nm1jwsfc9v 1

23-02-2024 11:30

240223-nmex7afc8t 3

23-02-2024 00:21

240223-anpbcshc73 8

22-02-2024 20:41

240222-zgssmseh9w 10

Analysis

max time kernel
22s
max time network
23s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23-02-2024 11:30

Sharing

Report Analysis Logs

General

Target

WhatsApp Image 2024-02-22 at 18.48.42.jpg
Size

275KB
MD5

65fbd7e8560a33804c5fef01fbf1031a
SHA1

ec1dd94fa010f3f870bbdad28f0ac1c196d085b7
SHA256

3f2d3f804b2ec5bd87c6facac593090ca47553e8f9a824c9911ad840b61cc113
SHA512

1bfc9edb18260dc5c268bd620f6b5de7fc30fff36d0d9e7fab5387760a7b8231172a91c1c08ee1ca771ebca365dfb047eca0e19be0727a46827353f63e133853
SSDEEP

6144:bxAACWr/TO73Nnjrk4rp4kL02lZbctlepL+Cy/j/zGjd4Utbtqqi2rH1Dbf:bmACW+pok4kLtZbc7Gz4g4+rrVvf

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\WhatsApp Image 2024-02-22 at 18.48.42.jpg"
1⤵
PID:1588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads