Analysis
-
max time kernel
1549s -
max time network
1586s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--01.png
-
Size
164KB
-
MD5
ffdd075b6fc4d7d2bda8b5361d01ded1
-
SHA1
150932e6f5e7a898b2aa463c9cd3d1e8138a4fdb
-
SHA256
0f0f0dfeeb98d504c36199d75986d924fe34fa32fda625b75ad815aeab44ae71
-
SHA512
ee17168a772866f916e57faf81b964491e65d96a464850d10a0572f2e085b9cb37f5a79d89b480fd642d9d5d15a631397d5f830494852f2bff1d78b2e85820b7
-
SSDEEP
3072:ILrd5rzDXMe1qQig/XlbwtryNx0+ii/TW+EhjwJlbq9f3R2lv6aqxXJdddvG:Ord5rzDXbigKtypigTHEhOtk3Mlv6N5W
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--01.png1⤵