Analysis
-
max time kernel
1595s -
max time network
1585s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--22.jpg
-
Size
116KB
-
MD5
0afcd044e639723a3e56537be30559e0
-
SHA1
0490cb0b2f6a64de028a942466535c54e3e2878c
-
SHA256
04c0cd5734c64f6e4aa7f635d500ea7b1c78a80c26e5bec3ee88b36ba9bfbc15
-
SHA512
3be8acfbf580988dbfdce8f7b1cc54ded7646e85656eb3d7146c70a5707e6aee0c40ed75999f4924b2d85c6b06014c5a6d723e08dfb19a5cfa9c37cf0aa680e8
-
SSDEEP
3072:SPcmVZozJS7Xu9MrBlXTf+eg1BazTuJConFXHTxU/1pW:SDVUJS73rBtr2YePnFO/PW
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--22.jpg1⤵