Analysis
-
max time kernel
1558s -
max time network
1587s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--15.jpg
-
Size
98KB
-
MD5
1246d6c96d544ea4aedd15f0926dc207
-
SHA1
eb9a5de56e768c161713b1f6c47ceaff38406ad2
-
SHA256
eeb3e27119b327669226cae7a635c84e8fd08bad80442d2dadc0614b1fbcfe1f
-
SHA512
77667348510f39df060aee1c3595d6520538519f617523fff0adfb3bdd6bd49ecf24701ae57ced33fea5149984942b036a65b8d910b9d6eeda97d995c8f45de0
-
SSDEEP
3072:cyib03J8Q/OWSblT6tuRV+/QMZeetjvLp43JbHT6mH7:cyiMJtWWYlVkQMYsLgJjTV7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--15.jpg1⤵