Analysis
-
max time kernel
1531s -
max time network
1570s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--11.jpg
-
Size
89KB
-
MD5
1486c8143add32159b124c7d1e299d78
-
SHA1
d88a9c2079898df743be92644c3a4847aec7212b
-
SHA256
e742281103a478048ca4eb99dbacd10aaf0557bb8a6e4e1c3fe2e71b987bafe8
-
SHA512
b0abae2139d03106fe364c12ae3d491235d209690bcd0c2ea9a6780a5a8d0aefec3cda26f14fbbc2037c1ce19483c109d727a27aeb3894c0b614ea168ba0d976
-
SSDEEP
1536:IonCe+dDgBzI975euPtsT+fB2DZLGj/HWbBB9/kPQPPoIuq1UfebZRFYRg6Agp:egq/VoDygBB9VoIJUmFRFagop
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--11.jpg1⤵