Analysis
-
max time kernel
41s -
max time network
75s -
platform
windows10-1703_x64 -
resource
win10-20220812-es -
resource tags
-
submitted
04/01/2023, 22:28
General
-
Target
BDay/3024x4032_54fcbc6693643e0e723f6deb7adc6b8b.jpg
-
Size
1.8MB
-
MD5
001a78f7f97902f78aa77f79d233f69f
-
SHA1
b30f1a14405048badb6afc8c06998223fd7a7300
-
SHA256
27fc08cc49585bebcff8fda0f57a8d49a2a9ebf26620045f810c1348c0e41b25
-
SHA512
f5fd4290ae17d00c799af87759c14ed5d03512e0b9adf87377981235cfb6708cc3bb0c70b07c57ea85ad71bc3f6bf961e31cfe3ac1a04816d9a79389a77d0715
-
SSDEEP
24576:s89A2haUiygnZH0DMrbqHNP2h61XfURCBsUwsAt89z2ku4DS2dwb8svfRR2AGD:s89nhU0DM8P5PMCBcsAa1m4XQvm7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\BDay\3024x4032_54fcbc6693643e0e723f6deb7adc6b8b.jpg1⤵