Resubmissions
24-08-2024 08:51
240824-kr54dsscma 324-08-2024 08:49
240824-kq45pstgkl 306-08-2024 12:57
240806-p679hszcpn 10Analysis
-
max time kernel
67s -
max time network
68s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
24-08-2024 08:49
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot_46.png
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
Screenshot_46.png
-
Size
2.1MB
-
MD5
9c9733889f1202cff3f345dedad148f2
-
SHA1
e71193c0a48b8734b94ab9dd2cfb15840439e6c9
-
SHA256
ada6083faa03cdbd00c5fd0967a1c87907f6abc03f9eeffb8c8f7d432b9cc78c
-
SHA512
22bb3617b286a8f98d4381b52c790aab706ea42408d87265cfcfa86ef4672390427ef8a19084a69b7690cbb53a45916614575d8a81b02362c74e46dd8ed88122
-
SSDEEP
49152:OqAE8MqKf9m2UFVqWlyXjRHWdAv6Iap+jBsH1++5dtV2XdptVHWv:TfqKf9m2wVvlyT0c6Iap+8dtVedRH+
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Screenshot_46.png1⤵PID:4748
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3024