Analysis
-
max time kernel
384s -
max time network
1588s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
-
submitted
16/04/2023, 17:37
General
-
Target
18/Packs-XXX.online--09.jpg
-
Size
87KB
-
MD5
c777ff5f11299c9b3249ec23ade21e46
-
SHA1
8ff2288c701474a7764caca1cae77d70aa29bcb1
-
SHA256
39deab5567e0ca9ab6db5eb13ced97785cbc6f2114704dc4cb8feffafacd7cf6
-
SHA512
5b1e1396fe0c546cde59d638d64ffad32d6f65bf9f2ef9ba5a904e3326b79cdc87d492598451f7a82dca69e9ad2a401361230fc099576f9f76d323416b1ee5a7
-
SSDEEP
1536:TBIk7hzudMPUP49DXU264xT09EmAoH766MrDuX5sn8HWSVNXLM4IzZ:VxEP49zp64J0WvoHG68iX5MSTXLYN
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--09.jpg1⤵