Resubmissions
05-08-2024 07:11
240805-hz14aszbrl 1005-08-2024 07:09
240805-hy7vfstdla 305-08-2024 07:05
240805-hwzfastcpg 605-08-2024 07:04
240805-hv7qaatcnf 305-08-2024 06:55
240805-hqavratbne 105-08-2024 06:55
240805-hp5nqszalm 105-08-2024 06:54
240805-hpqvkstbmd 1Analysis
-
max time kernel
1444s -
max time network
1445s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
05-08-2024 07:04
General
-
Target
Screenshot_20240729_011531_TikTok.jpg
-
Size
24KB
-
MD5
20bf28be2328c3fc71cc890f85c6c427
-
SHA1
99338e93d92c6852cb5ca9ff5dd3ef74da4543ce
-
SHA256
212c00916c1969a080b1475568d3acb77da5f471e449e1a3518ec0bef3e90736
-
SHA512
d7d1a28417abceb7689f89adbde87cacaa1298669d9a32fcf22bc1c58f6ad08e5891205f1e2782885745c15fb3b3dc037b39246189fafe911845fdd4a215d944
-
SSDEEP
768:sjbMqMTFiBTizxZv1gHnvwHTIjvQZ4Bs6GbPlWX2n3kh:pjTFiBTax1gHvwTI7wB6GboXe0h
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\Screenshot_20240729_011531_TikTok.jpg1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB