Analysis
-
max time kernel
1597s -
max time network
1569s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/04/2023, 17:56
General
-
Target
18/Packs-XXX.online--17.jpg
-
Size
99KB
-
MD5
f6a3c54062c564b18efbaea8d2045ad3
-
SHA1
dde373a30eabef1e359fec36c14d6e9a2a6d0be9
-
SHA256
654d26c8534b74352b168e0ec604869e2da5b15502d0156f6ad22dfc5026ddb9
-
SHA512
ae1847ff6b6831940898597ce98ec432ec5d2f91264d8ff77a2c12a5ca172b0b7607eda98a59615ae853a474ccc9054d9f252d7bbfa77a1f2c5e8969e3d8d9ee
-
SSDEEP
1536:MBi1ObIFYyd2vpg4YiVFDTk6CTyZx2SIm3pkg/26l7qFZVKZdLgc8AucjjQS1k0x:QiQsAvpg4YmBTkRlS2btWdLgbcXQS1tx
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--17.jpg1⤵