d97404002e0dc33afd30404a4462706b9892d82161c47d5b6ac57b4f0c397526 | Triage™

Resubmissions

30/05/2024, 14:20

240530-rnjjjsbd6v3

30/05/2024, 14:17

240530-rl1eaace277

Analysis

max time kernel
145s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
30/05/2024, 14:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vape v4.10/oldassets/rearview.png
Size 291B
Sample240530-rl1eaace27
SHA256 396322a81e8c15555adf3f709c353ddec0d77de6a485093ccdd28bf987fa9382
MD5 454e2114b6b88ab48d2302e2bb1e32a3
SHA1 74ae5bfc1c7c1e5be880b6a820e700e2f306314a
SHA512 32f52cfe8476f345c971ebe95047c28c74afbe386be01fa992ef9389bdcc5d304ac86da1907400dcbdca2cf9694ddb60cc0e7073edcca7121eb558308f072b0a
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\vape v4.10\oldassets\rearview.png"
1⤵
PID:424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads