Analysis
-
max time kernel
1799s -
max time network
1211s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--18.jpg
-
Size
125KB
-
MD5
596891465b4e3db94658df1a5f33a89e
-
SHA1
4d556d9e3f45dd11128ae6e802448db125646c07
-
SHA256
740f74f2f9d73daabbd1810095685f7542d2444d0f709bbe1d47f929e8fdb4a5
-
SHA512
5a433ec70e9c501136d653684801894e7d9ac97b000a3c1b4e4965de848d18119f1e0f1c759575a5816a103154fb57e320d27607330efc624505e0484010aea5
-
SSDEEP
3072:G1T36oNKLugMnLL73Fs9B/bhw0v2C4hz0F7NpXb0f7L1WHensTMi+H:236ogSgML3FsTDhw0+BW7NRo13iK
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--18.jpg1⤵