fe1fd2bb77618fa06e548283188cf3696acc9dd2d8a4c3f4e03560f3dddc3103

Resubmissions

28/03/2025, 20:43

250328-zhwwpasqx4 10

28/03/2025, 20:40

250328-zgc27a1vh1 10

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20250207-en
resource tags

arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 20:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

image_2025-03-28_204056178.png
Size

7KB
MD5

daf0a316fba7e913fe8305e4c8a53205
SHA1

0556975b72209b8067fd5b09ae21fa9c1bade785
SHA256

fe1fd2bb77618fa06e548283188cf3696acc9dd2d8a4c3f4e03560f3dddc3103
SHA512

e6fdaa9709f1a5a2a28eedeff4934f6060086f5eb60d4c9d576957c52d2c64fa43f475d44ceeb42cd5138a6dcafdadfef273817da1b19a3ab21e8ba1316f8f6e
SSDEEP

96:X2fEYr0GPuMnGuwrwfHYF9scngjmij+cf1uq9cy+Sxwn2xcViPvcGcos2P/sIZw+:mEazpG/Ok9Xg0y9C2XzPjP/ccVas3Hwc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1192	rundll32.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1192	rundll32.exe
1192	rundll32.exe

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen C:\Users\Admin\AppData\Local\Temp\image_2025-03-28_204056178.png
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1192

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1192-0-0x0000000000410000-0x0000000000411000-memory.dmp

Filesize
4KB

Download
memory/1192-1-0x0000000000410000-0x0000000000411000-memory.dmp

Filesize
4KB

Download