Overview

overview

6

Static

static

1

Screenshot...59.png

windows7-x64

6

Screenshot...59.png

windows10-2004-x64

3

Analysis

  • max time kernel
    23s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 14:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Screenshot 2023-07-05 230859.png

  • Size

    185KB

  • MD5

    50153def351210fb256c7595d432b4cc

  • SHA1

    19a50057b42512b7b2b9610e3eb17b3bbff336d4

  • SHA256

    020582e7c7bb6fc721be86384e87a7e841a9ef9dee0545c64baa17f65f88d4fe

  • SHA512

    0e52e41943e7496326b79aeca48a23094865228a969c6a5626bc4c1ea4c70936f07a295286f2b5b257d4905f4d98d66f36bb6bcc3ae49babc7afe3fab0568799

  • SSDEEP

    3072:TpYO6XIK9FvHWgMFKlOWv6OVlW34beDzDT4hn/LR+jxGf7FCijSfkez42zUZSf:Nr6XIK+Mo3DUDRCO7FC15f

Score
6/10
persistence

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen "C:\Users\Admin\AppData\Local\Temp\Screenshot 2023-07-05 230859.png"
    1⤵
      PID:2756
    • C:\Windows\system32\StikyNot.exe
      "C:\Windows\system32\StikyNot.exe"
      1⤵
      • Adds Run key to start application
      PID:1684

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1684-2-0x0000000002500000-0x0000000002501000-memory.dmp

      Filesize

      4KB

      Download