b14c1dd6ea93691c225bc504201064f846ca84da394ea2dc2396480f6994f655

Resubmissions

19/11/2024, 16:37

241119-t4za2stjdp 3

19/11/2024, 16:32

241119-t2f2paygkp 3

Analysis

max time kernel
363s
max time network
365s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
19/11/2024, 16:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

king-von-musician-mi2x5zktza85zozo.jpg
Size

446KB
MD5

021c612ca1a1b14e35b1bdaa3c356add
SHA1

62c885b4230e32ec33fbe6c578ecdef63fc2e848
SHA256

b14c1dd6ea93691c225bc504201064f846ca84da394ea2dc2396480f6994f655
SHA512

7d866a4e33134c700a8386fbf379336990f5cae238a6cb04d0239600993a18206d72ee09187c3baae780ca82db8a1539c714620d0cc1b67312e43aacaa234750
SSDEEP

12288:wt9OiKM1qS9J9Cw6a/yoaGBB2H8PVRIfjDmQO4EkWrcx:wOit139LCw6g1BK8HUEkWa

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2912	rundll32.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2912	rundll32.exe
2912	rundll32.exe

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\king-von-musician-mi2x5zktza85zozo.jpg
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2912-0-0x0000000001EE0000-0x0000000001EE1000-memory.dmp

Filesize
4KB

Download
memory/2912-1-0x0000000001EE0000-0x0000000001EE1000-memory.dmp

Filesize
4KB

Download