Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10-10-2024 06:57
Static task
static1
Behavioral task
behavioral1
Sample
Privé.jpg
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Privé.jpg
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
Privé.jpg
-
Size
649KB
-
MD5
86ce62a2769fb25906dad8de71c167a6
-
SHA1
2af3c749a1d55918ed2cebf6ebb35df8ee320bd8
-
SHA256
3979f4266e29d45fe2a19482803c144a0c4b9bb341e5470e3eecf6f747405294
-
SHA512
2352d47764abeff626454ebf3f53704e01533e229557730795b5e029516bdf1ddfb509af2f6e731f53552323ed237afeafcd4064341a621c5bead856612f26fe
-
SSDEEP
12288:1APC33FMURj2HKfhC9btgi89NiH/FY/QUhAKve9S/5/vObFwqnnTB4fMVhsjptb2:1A8Hl2RxV2QiYUhDe9C/Gwqnnkg0L2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2628 rundll32.exe