Analysis
-
max time kernel
1781s -
max time network
1590s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--10.jpg
-
Size
96KB
-
MD5
8744ea3c37020c73d03542d9b4c969ec
-
SHA1
8a2cc3f72edb65fe361598b7d44e5dc31382bf5d
-
SHA256
21dde1f1901d7b37320dc286042dbb51243ef649990a21f23e9592514cbf29a0
-
SHA512
e83fecd3c4bae57de358fa95912ad2e750f94b84d03f780857df54d89dcb6c987a1da7eaae8da1913daed72822c39d42a5b544696ecde7ce68387d7ab164f169
-
SSDEEP
3072:oMbo46PocP2u2CgOVu7uWPLeVe5A+5s7vIx:oMbo4UPT2CgdaWPUeM7vS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--10.jpg1⤵