f19a78af49f7491a569092e907e3df8175429641cb6f0031cd6703cde239ef96 | Triage

Analysis

max time kernel
41s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 21:34

Sharing

Report Analysis Logs

General

Target

geode/resources/geode.loader/BlankSheet.png
Size

320KB
MD5

99f12f413136e5a0f929a12885e411fb
SHA1

35d933408ed391dd3d3334b90d5d814f7f1fc243
SHA256

8069d127726b63a39a39ba7ccad9813f0387979a8fdf50fa8cc1eac9afecea51
SHA512

f3fdd466c7bd5a2eafe6c9d6faee82ed8a6ba6cd3ad88fb333f33f529aa0c393246de3e7fcf285d9099669d5f4c9f8d63249dfd1104fb2f0fe20ffd481814a60
SSDEEP

6144:aDDN07YMUduJ5zmHhMoNZiBEe5RmSGAji/3N35DRbMOQzwsaFzcKhAGy:yhwYMUduJ5zmHOu7AmSGdvDDLBsaFzcP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\BlankSheet.png
1⤵
PID:3724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads