Analysis
-
max time kernel
167s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20-09-2022 04:27
General
-
Target
12ertyuiYbtsimni_Vkimodjn.jpg
-
Size
753KB
-
MD5
4ca813d4252b40567657b45854eebc41
-
SHA1
589cd6d8a12d2d0e6d651bd37f2e3d5ef3b13b61
-
SHA256
8102b84a1c079a42533201320173fa49cc969c5476d00bcf7c9c2f3aa050a16a
-
SHA512
f3b1da497e9c39031de87e512edfaa033bf4e9456311222aa17570ef4887e1a6754e69f5903dfe3a14f10c58723b41187442b943dd2ebb9f24eb4dbb4959ccd2
-
SSDEEP
12288:3mxwqwAKBHtfNq77Nu7zBLS571icocouFcVrYQFD6WICDfDYkMTbT4RK1go210xa:2CRBHRNc7eI71ibT+ZC7ckEn4c220P
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\12ertyuiYbtsimni_Vkimodjn.jpg1⤵