Analysis
-
max time kernel
82s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
12-04-2023 21:45
General
-
Target
skins/132158fa0c74f9a9.png
-
Size
589B
-
MD5
66350fbbdad0fdb193763da348d80a9d
-
SHA1
e3dac63699b65a1b9d2164e46d5e16369297e0ef
-
SHA256
dde530ffb9108e537fd29a3641518bf0b2f6da8fb3402e8c32349dc93cbca166
-
SHA512
0fda8752f74c1b8b00b9bba6e9aae239cffe05debd835ae16427e1cd91e3bb76a9809e58455fc465bc667e7b90b5fc15dd486ee069797cd59053cac7bf62747a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\skins\132158fa0c74f9a9.png1⤵