Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20220721-en - resource tags
- submitted
09/08/2022, 16:33
General
- Target invoice-not-paid-date08-08-22-pdf.lnk
- Size 1KB
- Sample220809-t2v6lschgk
- SHA256 112ef54c2f6e23b49bdab0e15a4d9b9922775f7bf1f1cc6306db6e2cc49452bc
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\invoice-not-paid-date08-08-22-pdf.lnk1⤵