Analysis
-
max time kernel
277s -
max time network
280s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
24/03/2023, 00:48
General
-
Target
aa.jpg
-
Size
45KB
-
MD5
21e079d5b903709d3c48cb84b0f8586d
-
SHA1
0a336833727c36d4292a2d3cd78bc63e5b24611a
-
SHA256
2581caaad5d13a81df987adb0c0e08bee13c856cd58b3e5fe0e30af2d4631241
-
SHA512
04065fe61c0d0d8aabeee31f58636f0d30484d77f01cd5da174153614fe39856ac5e31bcbeac94721f46c65154d175e8663a7a81829422402705ea72c8261aaa
-
SSDEEP
768:YRnjUeabpPCMOmtEcpWP9Hoxf0NkdKJLwZVNnir//7zGP8q:YiRCAGaWPWxfzwKNir//7iR
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\aa.jpg1⤵