Analysis
-
max time kernel
94s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 13:45
General
-
Target
09JB344QE.tif
-
Size
50KB
-
MD5
593a0105b0b4da867805713b2771322a
-
SHA1
db01696303bcd5d45f6e9e520fa0ba5b09a3e062
-
SHA256
8d7f94cec1c9bb3d9e78ec86691aa38d4c81db77f4374340222feb7e59c5d37d
-
SHA512
f2977733dd3982628e1249ef1604ccabb991df58d0cbb9f190a0ea9bd6a3121bd5b41ece905ad96f6c9eb3138a0a05541ec3fde40aa270324ab6bfef1d337e59
-
SSDEEP
768:s1DyUuHGoaijSmORARt35HAik5g2k3tz2EWxLBjHdhwbqwk2fp0F0jIjzmcmwgF3:s1DyUkGmS0cO6HdhwbqwkMeROply/je
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\09JB344QE.tif1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx