Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
21-11-2022 21:03
General
-
Target
Airsoft_squad.jpg
-
Size
165KB
-
MD5
faa8fddb46c3e543b51f9fb08b92e76e
-
SHA1
410ae860cbb9613bba914e26ad114ac8702504a7
-
SHA256
3d4d97bf34b9f898058dc6172f660e94d84956490ba0a04c389f5b1bc4dafd41
-
SHA512
4960ecc19f3b2f24ac7786df91718495bfc7db0828e8eb59bf3eaa14b935a3cc6f3d90773b4a932ca6a9c7ba823f263ce69e8ace8e4a2b86d7ea917702ae098d
-
SSDEEP
3072:FGfdPCCQmf9UxF4+OYYI3LI485b0OsjoR1oakoXrTEKd0IYPmKxGZ:FsdPCCDE4+OYYIi5gvob2oXrL++tZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Airsoft_squad.jpg1⤵