5b9bbb2e3bcbf2524e38b2c3b637b1485ee2205bdfd8bdfe896f7cfe9c6d041c | Triage

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2022 23:04

Sharing

Report Analysis Logs

General

Target

document.lnk
Size

1KB
MD5

9d3bcb0209e7155f487ee87c77407ddc
SHA1

1ba1647270c20c70368ba4eb66f2adc11ba24741
SHA256

95ddab71bad5194f1aa06a893efc6009759fabb27ad95d49da2f8c865981884b
SHA512

8a7cabf850dc10a91bc228ba6d21337d80610a93c0307138a5d52f2af70bcb9dfb974b0cfd10faa7207372a561409b1543cc508fe9aac96d6c8b4e456848d5c2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\document.lnk
1⤵
PID:3372

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...