0676d31174e16c8f42c1d2fa87adf2c5623c121aef0e28f2dba9086a9077f105 | Triage

Submit
Reports

Overview

overview

7

Static

static

1

菟籽.7z

windows7-x64

3

菟籽.7z

windows10-2004-x64

7

菟籽散兵.7z

windows7-x64

3

菟籽散兵.7z

windows10-2004-x64

7

20240212_204309.jpg

windows7-x64

3

20240212_204309.jpg

windows10-2004-x64

3

20240212_204312.jpg

windows7-x64

3

20240212_204312.jpg

windows10-2004-x64

3

20240212_204314.jpg

windows7-x64

3

20240212_204314.jpg

windows10-2004-x64

3

20240212_204317.jpg

windows7-x64

3

20240212_204317.jpg

windows10-2004-x64

3

20240212_204322.jpg

windows7-x64

3

20240212_204322.jpg

windows10-2004-x64

3

20240212_204324.jpg

windows7-x64

3

20240212_204324.jpg

windows10-2004-x64

3

20240212_204326.jpg

windows7-x64

3

20240212_204326.jpg

windows10-2004-x64

3

20240212_204329.jpg

windows7-x64

3

20240212_204329.jpg

windows10-2004-x64

3

20240212_204333.jpg

windows7-x64

3

20240212_204333.jpg

windows10-2004-x64

3

20240212_204335.jpg

windows7-x64

3

20240212_204335.jpg

windows10-2004-x64

3

20240212_204337.jpg

windows7-x64

3

20240212_204337.jpg

windows10-2004-x64

3

20240212_204340.jpg

windows7-x64

3

20240212_204340.jpg

windows10-2004-x64

3

20240212_204346.jpg

windows7-x64

3

20240212_204346.jpg

windows10-2004-x64

3

20240212_204348.jpg

windows7-x64

3

20240212_204348.jpg

windows10-2004-x64

3

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 15:18

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

菟籽.7z

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

菟籽.7z

Resource

win10v2004-20240221-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

菟籽散兵.7z

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

菟籽散兵.7z

Resource

win10v2004-20240221-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

20240212_204309.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

20240212_204309.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

20240212_204312.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

20240212_204312.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

20240212_204314.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

20240212_204314.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

20240212_204317.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

20240212_204317.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

20240212_204322.jpg

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

20240212_204322.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

20240212_204324.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

20240212_204324.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

20240212_204326.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

20240212_204326.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

20240212_204329.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

20240212_204329.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

20240212_204333.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

20240212_204333.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

20240212_204335.jpg

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

20240212_204335.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

20240212_204337.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

20240212_204337.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

20240212_204340.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

20240212_204340.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

20240212_204346.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

20240212_204346.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

20240212_204348.jpg

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

20240212_204348.jpg

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

20240212_204333.jpg
Size

1.7MB
MD5

4397142151b942c9121508d237f1cba3
SHA1

c2f5ffe8b659b3b836e9b73337ece02c5c12676e
SHA256

fc6b31c8f4f290025459de50a8144148b042395ebe90d1d4219a80d5231a2c5a
SHA512

e3ebab19b143b555dba2961bfb9306d4bb36839246b6ed1c944cc4c1d5e229fd45e15f2a083d89ca0b8a9f93c1f1058900ec19001eca3ffe15ab54000b23092d
SSDEEP

49152:sS9s3yry7JKdm0PHTOhhgzQZSgK1IKZw5rw:3GJV0LOh2zQZSg1K+w

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\20240212_204333.jpg
1⤵
PID:4476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy