4367ef10c26ce4b66be5a31f39529d7eb0a167da0321be894e43d4ed577385cf | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
22/09/2022, 14:17

Sharing

Report Analysis Logs

General

Target

Insurance.lnk
Size

1KB
MD5

764c1c3f104e10245efdbfcfb43fd50a
SHA1

2d53ddee44fc403573106f74ab151f57c015f616
SHA256

035e1577eeeef4d4e1678c55d30622ca92bd31ec5f5df4199408d0e06ffc287c
SHA512

27fc64b616d20caee9f01620ea45da0201ffe89b855fa81d8d49ae96a1199191d47f164f7f16387a49328d95c5c5b99dd268439b27fe77edf8ef8136a9c878f0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Insurance.lnk
1⤵
PID:1832

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1832-54-0x000007FEFC341000-0x000007FEFC343000-memory.dmp

Filesize
8KB

Download