ab7e4085828b98e52db4a171a5c3b01f7e6a3c1ab97885466a5f97e35e6a10a1 | Triage

Analysis

max time kernel
132s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
20-05-2024 05:00

Sharing

Report Analysis Logs

General

Target

overrides/config/Obscuria/Data/loot_journal_cover.png
Size

31KB
MD5

d211874e8493efff00faf9f05033f620
SHA1

55fc3c5bd0e2ed81740f570d2f6de1a3a5131cab
SHA256

c516870f7eabb04f762e581df53a7c7330ec28c68f2245fb07885af71bd37830
SHA512

83e6e97d54e1d3bf4badc9bc15d1e8d1caf2fa388c8be6b03b21edfd0e62d2a3d4f124d4824182e02b241d78b778e19dfdc9aeee7eacf76f82649e1b73b3e21b
SSDEEP

768:pJwwPurDNs92mgCGBFpXqAEjWHK2knOdw9:EwPurXmVojyWq2kwm

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\overrides\config\Obscuria\Data\loot_journal_cover.png
1⤵
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads