Analysis
-
max time kernel
1771s -
max time network
1580s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--02.jpg
-
Size
86KB
-
MD5
96a22cfad46a2df5e94a08b4ecc530dc
-
SHA1
97765f507aed5983f2658e5ec5683b18ba031f5c
-
SHA256
38a66abe5b35e74d3887fe361bc27a8b5ad214ab838bf777dcc4b0e237f140d5
-
SHA512
eaa9ef3f76cd968e87525d19ab77f929676828a7534b54ae69bb57a45f83c9cd0b6f0a5261c1622579d406ba9dd634cf369cd600be14798623d12c6a77022c1c
-
SSDEEP
1536:T6w1WeT+9IRAz/MCGZqugqFln9ztAN/jfSaTmnsqH/sEtoqNjdvK0Asd:H1ny/NGEugAdxtafSzsWs4omdv5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--02.jpg1⤵