Analysis
-
max time kernel
70s -
max time network
83s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
21/03/2023, 22:50
General
-
Target
survey_es_final.png
-
Size
727KB
-
MD5
a6e4526edd438d372628eb1063dc93ae
-
SHA1
5b1992027d4ba149abbfc67ad8871f75b8f8aff5
-
SHA256
a93ab614bce9c768d8bd1508a4a3502264c143138f4c5aa16de930456b351b7a
-
SHA512
00f42298832208b02d88e1f99124ac680c46c7c0319837d50c1bd66101992861379b410f898e10ea897eb117b2c2f57e3d68e689ee409b9733a8d92293e84dca
-
SSDEEP
12288:uM1K4H5seZx54QJrKoGQt9o6xqCKX/XzDmXSHdI6sj6l0zbghA2re7KbE9CyaT9O:RQ4LNJrTPxGvfgeIdcxgvaT9fG
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\survey_es_final.png1⤵