Analysis
-
max time kernel
1543s -
max time network
1580s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--20.jpg
-
Size
107KB
-
MD5
a84d65b9b2071343cccf2897c31a2deb
-
SHA1
a87f482f63a3001e98b83478b3f3746c1c46fb06
-
SHA256
76178f49ec7fb44e900b1d288f46ce82f2423768bef7e3f8fbbd7e75b3e98367
-
SHA512
9caccc075d95ca120a49669f5d0e362eeb72861e8e938be31fb619e36a8124ac4b48f1e9b647617c2c65fe6a7714a91e39843946015348bd7ee484a401e9ff1e
-
SSDEEP
3072:KoRLINnY++WKdHqsDo96xKaAAHT+q0NDnlF:KULINY5Fqsk9qAAHcX
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--20.jpg1⤵