Analysis
-
max time kernel
970s -
max time network
972s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
21-03-2023 06:09
General
-
Target
cversions.2.db
-
Size
16KB
-
MD5
f50b8221390febea673be698a6839744
-
SHA1
cca7be0b590583a72276069d0d8f6f9a858bb092
-
SHA256
de800ec458c404e412158787a7bc6660fe54a2bc3b6903b31d07a661325056f0
-
SHA512
1b69137cbffc12f70e036ed7ce5577ba2c024386bb97139f19cbe5cb9f3920fd00f62e62971ea12116b9edfbf842c1c8e3205271ba3e4fb160265850c13ccbea
-
SSDEEP
24:Rv0q54sc//0E6igTsi5QkU//M8yKIDka5I8M//:Rd54sc6igTs//M8a5I8M
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\cversions.2.db1⤵