8e9265fba8f03efd532c2a686f5adfbc203488570577210a16d87767125023d4 | Triage

Analysis

max time kernel
94s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
22/09/2022, 17:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Contract.lnk
Size

1KB
MD5

36467c48ef73692dd99d03e5b74741b6
SHA1

3985926ae4c66bf5dbdeb77aace3618e962cb4b5
SHA256

84bf02b093fe421f5476612c35264d3fc4b46bb5867ae01daafcc6174090f1d3
SHA512

c22ace659a6942e3bac6566aa3701ed8ec2d36f62c2f6bab86ad32b9616f3f35a3b4fa231e12b12e0faca6f9d88d9ba1e46e763982c6b335e89d763a578d5d18

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
1⤵
PID:648

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads