Analysis
-
max time kernel
122s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
16-12-2024 09:15
General
-
Target
.rsrc/ICON/1.png
-
Size
5KB
-
MD5
286c1e3fc7c04e3a023247c121ee6371
-
SHA1
1a6db109430b2675b2d2823534a860efe5bed6df
-
SHA256
7a712c0f6a6789e91ba148157c3b4e505624af6787c9a752194c497cf96f792c
-
SHA512
0ac03fe4cf8cc6c085a58d5a660c4829e9aed410697cf321e4507fd7d6bc5da0a2e3583ee1d5ed80dfdd8853efef7173be678c13c46bd9ecf0477c4ef1193f86
-
SSDEEP
96:2tyzC0VphrgyqtcKPENHd9jo5AIRNmgtCKFnxyDvhrLw6MCl2B/4pzs8o:2uCSpNAbPEZjoCIRogtCyoDJrk6K/4p0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\.rsrc\ICON\1.png1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB