Analysis
-
max time kernel
1438s -
max time network
1224s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/04/2023, 17:56
General
-
Target
18/Packs-XXX.online--07.jpg
-
Size
69KB
-
MD5
f3aa4de0877e4c339c653f2a3ff88b57
-
SHA1
6840a4e320890bbeb4db3bb6fc48da0ed5710edc
-
SHA256
465116f9b1eddb4e216587f8df1b36a10274c1e622c8720ffce8862a11d9845f
-
SHA512
e95e82b4235ddf673167ae4a864ebd81b9472d84c4b9347a0c0f81e25208503d8fa6436131d91c1107e2bd0a4f7465859918cc6242bec09615473e56166a17e4
-
SSDEEP
1536:TpdqAowu59u5heMFrYRqZhwUk5rnw2vmuKVC6+V7C:fbo9Du7e5RWBSrnw6KVj+lC
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\18\Packs-XXX.online--07.jpg1⤵