Analysis
-
max time kernel
150s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 17:25
Static task
static1
Behavioral task
behavioral1
Sample
Geek Squad Security Services.msg
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Geek Squad Security Services.msg
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Geek Squad 941025651.jpg
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Geek Squad 941025651.jpg
Resource
win10v2004-20220812-en
General
-
Target
Geek Squad 941025651.jpg
-
Size
1.3MB
-
MD5
17195aafd7769c4618a2b04e3be17e90
-
SHA1
e3e095db5495947ec3459c179b30570f70fc0dc5
-
SHA256
3ccbf73e9127f6d3fd281f8401e8926285ed2ce86c8c02af7e7d92abdb81dc62
-
SHA512
7ee13d629c286a2ccd080e714fa08328beb590d9f20f9419ea1ec7ec0e39d9f5931176199db5787df8c40924833bd190f5912ed6114e9c511c0be8997f7c406d
-
SSDEEP
24576:c/yEl7qrraXbC5JnkWBZAveZg3aFCnP/Ea:c/FluraLCjk+QeU3N
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.