Analysis
-
max time kernel
32s -
max time network
71s -
platform
windows10-1703_x64 -
resource
win10-20220901-es -
resource tags
-
submitted
04-01-2023 22:28
General
-
Target
BDay/3840x2880_589bcd68bfacc2224fcd98a979ac542d.jpg
-
Size
1.6MB
-
MD5
a8cf1616f083ed75f0c29fcd33b143ba
-
SHA1
f7b72e00c73a9f99baec04d06c55e7e6a86f0b5e
-
SHA256
69e55e46e15a8fffcede0bcf89b5abef2b924ccf3f49b53b39873dd0fb81376f
-
SHA512
1ed5f19ae4e47ed1005fe45c370f2c2c072b2ba17e068ecd39d580ce70ab60d56cc529ff22e61824f5daf035cd536fbe18d19effdbd01a36e458734fbb45875a
-
SSDEEP
49152:6+ak5ahrDGtcvkAZl1yQV3yxfo9BKr76WF:4kUGtcvki1ylhuBKrF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\BDay\3840x2880_589bcd68bfacc2224fcd98a979ac542d.jpg1⤵