Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
31/03/2023, 23:33
General
-
Target
Screenshot_20230330_230616_Zadkine.jpg
-
Size
352KB
-
MD5
9d2700ca4a1f1391d2b64e1c91daedf6
-
SHA1
fd6c0d055b365ca6436dc8e8d4b6ac4378768d50
-
SHA256
8fa34f44a4c8a0f7f45bc7652f7c09d6fe15e09a4b1a4a09e08120bd67e05cd7
-
SHA512
df57e9096cd0a451a5c23ef507b48d5a5a0aa4a50aae96e77481462ea47e0c9ad9fb3b29f1c3e4e41e609ff9d3377cf6472f611b051fc6d395f3ab5a95ae273c
-
SSDEEP
6144:Jo9qWJuJuJuJuJuJuJS3+2tglR/kkoq5vQ5Kd4OrLyvPL5rzADOnL1kwYuOA+SkQ:Jo9qWJuJuJuJuJuJuJgtuR/aq3v6P9gk
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Screenshot_20230330_230616_Zadkine.jpg1⤵