Analysis
-
max time kernel
1758s -
max time network
1587s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16-04-2023 17:56
General
-
Target
18/Packs-XXX.online--06.jpg
-
Size
71KB
-
MD5
12e4c3b13ff528559a4d8b7938791389
-
SHA1
21089e2350e38450c33cb22a75343c28a0c6c462
-
SHA256
1e89690bc24d01aad961a55550d7965a884accd370439ecfb3b53b96a81bb8af
-
SHA512
3c2b5eb5b0640c34afb8d2324df10596b8f1d09bec3e41ffa931891c12d08c8e8227c2815d4d4e23a27732247dacba4468399c8240a2444226247ea68c7d2e9b
-
SSDEEP
1536:Tfdy7/70f2McKX6bnltLALmjx0sMUk9Sp14X/KzLwuLZ3/XDgkB9g:jdy3u3KTl2maqpOCwuLM
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--06.jpg1⤵