549dbe51d672d510fcfc4bc41a0b7bc94052ecd2bd5da5b901af6fa830d9a270 | Triage

Analysis

max time kernel
150s
max time network
160s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
29/02/2024, 00:20

Sharing

Report Analysis Logs

General

Target

Resources/dialog/take-back-pressed.png
Size

375KB
MD5

aa479dd0ebe5382524003abd9581b0ad
SHA1

259314c4177f801ee7b7ebe80dd4dbbdd382a29d
SHA256

7f9780b22402941a7f1b8685ca98256699b730f03c957d16bc3e7d8dc8a7e153
SHA512

1d61cd6c7590aad15e23915bc7476e3ebbe46d6542a4dad95d2881f5189723295d15f840ecf2116cb52da86f5db831d0af4cbcd23cb0afd6b112a0efb0b89a23
SSDEEP

3072:bibLLwM79GD02y3JTmE9Hun/Mf5ujO2ln29lZm0pQ65:eDUa5TjBun0f4jOKnsjL

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Resources\dialog\take-back-pressed.png
1⤵
PID:4852

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads