Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220310-en -
submitted
31-03-2022 04:57
General
-
Target
Proprietor sign.jpg
-
Size
5KB
-
MD5
2e2c55f2c34e029f117197cc089e6ed0
-
SHA1
41fae704b1bd2409c77e72d12271766a721d4a29
-
SHA256
5fce9f47c7749afe3164995e3ab56a9c659528d61b183edfd5a5e71ab01ffd6f
-
SHA512
e727c127a0d9053bd6a2319b2ff34efe3d98bab52741a9cd4279e48181bdd5ccf75069d9a11c898c2466391856515c6fac6c1f14a272479f4bdc8cf282a1161a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Proprietor sign.jpg"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k appmodel -p -s camsvc1⤵