Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
16-12-2024 09:15
General
-
Target
.rsrc/ICON/3.ico
-
Size
4KB
-
MD5
dc9948da9e52911b23480b34f995d723
-
SHA1
655b9e00cc93f76a2b5bf7c024c756783da13432
-
SHA256
e166c0f6f604ada1b09e4102cebd753f950a8efbb521d8adef45e4b5fb01f97b
-
SHA512
c6d90f6a78866e2a95748680fc9d9309a9117149ef192d3acf2a37b3bb46a70927d0db6948bb0ab5c40765253f32f52b2ff08f311ed6b6118cbf40f46e516648
-
SSDEEP
48:e1N0CCCCCCG2G5YbZ2zOunaj3vc6bUD1FZu3Ai3oSDqqFOTkSfbGHDH2ahRWeXTN:K0CCCCCCG2LNMOeaj3vZUBF3QvrM0Ui
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\.rsrc\ICON\3.ico1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB