ab7e4085828b98e52db4a171a5c3b01f7e6a3c1ab97885466a5f97e35e6a10a1 | Triage

Analysis

max time kernel
133s
max time network
140s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
20/05/2024, 05:00

Sharing

Report Analysis Logs

General

Target

overrides/config/Obscuria/Data/obscure_api_cover.png
Size

62KB
MD5

8b355bf8844ae3d3ba4418e1914f8d80
SHA1

d99ae3c1ba459750a69361d57be4654edeb65566
SHA256

ecd943698913173d1513b8a300072557304e9c262eb8eaa012ba0a357a6a5ad1
SHA512

5b2ea931fa9e5843550ddeade11ed7b19980e43386846af0e2776e3112c171309f11bfe69989821814f9238bb2f5a3f1468aac8d456545af6ecf982a241aacb9
SSDEEP

768:QA2lf4r12CrMQtiH8v3U0edJIWhGcB4hvuwFaugbmhVmJhFSIkibwPvP1P7vw+PM:Qlg8QHv7GJnovuy9gbmWZfk9YzCkuLK7

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\overrides\config\Obscuria\Data\obscure_api_cover.png
1⤵
PID:5008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads