e7c7f815a6018adfef0711b49919e998d6ddcaa4a06e97969d9f3b0993f6f17b | Triage

Analysis

max time kernel
402s
max time network
1609s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
16/04/2023, 17:37

Sharing

Report Analysis Logs

General

Target

18/Packs-XXX.online--08.jpg
Size

98KB
MD5

8f68e11c6f553456d641c61a7c397c52
SHA1

bd828e375e6496ae75eba643791e81a7dc51ddef
SHA256

2a585a491797c90ac4495a7075930ac56ee2acecb8e73d11500495e4d39bce74
SHA512

60c22be20d9a6ad619fbf8f260dc992044a25ac068b30ca45423e9f9bd9709fff1b08afc6738fedbc42ed3c13910fa03a06a5e6642df3b3cd35b77732b826e71
SSDEEP

3072:97A6juzu0J4evl4sIK7P5LpnjvimOGL47Y9I0Fn:dMn1xpP3xOGU7EIq

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--08.jpg
1⤵
PID:1792

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads