c0e7c9338314ebaf19bcea19ca74e0a4f8c39c62bf9937744f78c2c3ed2563b6 | Triage

Resubmissions

14-01-2025 20:41

250114-zgynws1neq 3

14-01-2025 19:57

250114-ypmqxsxqa1 3

14-01-2025 19:48

250114-yh74aazkfn 10

14-01-2025 19:42

250114-yeyqfazjfl 6

Analysis

max time kernel
5s
platform
windows11-21h2_x64
resource
win11-20241023-en
resource tags

arch:x64arch:x86image:win11-20241023-enlocale:en-usos:windows11-21h2-x64system
submitted
14-01-2025 20:41

Sharing

Report Analysis Logs

General

Target

Annotation 2025-01-13 114431.png
Size

185KB
MD5

793dfe91881d218f704885de52b5ad0e
SHA1

619bdc719abe0ef21e4b2f520f9db8153537d35f
SHA256

c0e7c9338314ebaf19bcea19ca74e0a4f8c39c62bf9937744f78c2c3ed2563b6
SHA512

f573ca94dc59c1d53d0d7dc34a5f8c02db3d08fb2c458e7b7770ff1ea589ccf0ddbc7d7b2eabd03c89bde685490ef9236a92f01f0cf476427a303062b51acf4d
SSDEEP

3072:dooWWocQ8Ewpa3C6jNZWGrYhgduzCOmB9i4B8YMfnvBls6i4DEHzvxJaUHHUsX72:dooW1cQ8PoyIWGzpOy87fnv/5oHrxU8e

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Annotation 2025-01-13 114431.png"
1⤵
PID:3040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads