c0d3dfc1e72066434b51f0d18d4b94adb6d7dbc03dfd4dc4955b1ed3487700ee | Triage

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-09-2022 12:50

Sharing

Report Analysis Logs

General

Target

Document.lnk
Size

1KB
MD5

9941408a2089b361a48f93567439eaff
SHA1

81f441f134fe1608337beee0343eebe0325f75d9
SHA256

0117e9ff86837fc18fb35dfbffdfb8e647dc17c0f19a699cfff416c9dd4473b8
SHA512

91d57d127c46a5e55b1a16a19338bf92365e35ad73b85541025b7d2d2dc34af095fae382617b7fa93c61f2428b377057c26eacfa8649668f943fdaf4c25002b3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Document.lnk
1⤵
PID:4800

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads