Analysis
- max time kernel
42s - max time network
46s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
25/08/2022, 11:33
General
- Target documents048.lnk
- Size 1KB
- Sample220825-nnvd9sdcf2
- SHA256 067900ab60a747a380c0f81cd711e2db4df01db3a07970310ba145151f00929b
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\documents048.lnk1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1100-54-0x000007FEFC1F1000-0x000007FEFC1F3000-memory.dmp