Analysis
-
max time kernel
1613s -
max time network
1583s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/04/2023, 17:56
General
-
Target
18/Packs-XXX.online--13.jpg
-
Size
100KB
-
MD5
8251ab923aa22a1f52ee7209ab2eff73
-
SHA1
a3a604821cd3afebc791dbcbba276ac6cf1c114b
-
SHA256
1a9ad84f4e4691a76cf5bb6c870b3af8f902a07079ebe94d0b327b1fcd660e8d
-
SHA512
a690f093f5c7a20f755af3b8bc799d4edcac2d26f8fbf2f136b0b7785baa8468a8849e94b4eea504f1a490458eb3bdfae53e65ad6ab371f8d9852fc23d8f26c1
-
SSDEEP
1536:TciEA4n5KTwwFnWuZOXS0Rl+8CP1zykBZL5UYNkCYRpJEBzWMZL/quc5JH5yJcyV:cAW5KJDUjlRCPMk/L5Uws+Su4JZS3F
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--13.jpg1⤵