Analysis
-
max time kernel
90s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
02-06-2022 19:49
General
-
Target
Scan_139.jpg
-
Size
88KB
-
MD5
f9b2333cc7e93568486a672225f2dd69
-
SHA1
c0143893cd2461fb2dc2c84330c1bf469dc93c34
-
SHA256
7e3875bf31005d9d352d9b029e4364df19dccf6c77f16539ca974f224a30347c
-
SHA512
d30732aba584782ef2783f388ca9183f9c4b02ec6b3e8741a91fae152f2bae19b655a53d19fc2cdbf85a0da3621d0de6c50129435b6ba937a083416d2d22c7f1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Scan_139.jpg1⤵