Analysis
-
max time kernel
1740s -
max time network
1229s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--21.jpg
-
Size
102KB
-
MD5
803f2d0a16c98dc38e7aa473bd6219f0
-
SHA1
bf56b689d47173f28459ae5ad9e045962fa6f5d2
-
SHA256
c380289ba12818b406733ee0f0892098a94e9a343b580742e702d58a7ee48974
-
SHA512
6bb53025f3105e70ba2525a9475faa813d1468cbf14391a3bd3b43b8154a577ea20a4de221f89af069b8d60e8c3209a2a0c2cc3dfb39a6c31da6181cd7a3dad3
-
SSDEEP
3072:Ut6oTccKad7JquxZnQ5goAWjCv6148+4y:m9gctSWnurAli1488
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--21.jpg1⤵