df83a0141850ba352899bd7eaaac601d2e28fe742c4585f41bcd7d6f6fbd89b2 | Triage

Analysis

max time kernel
38s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24/09/2022, 03:02

Sharing

Report Analysis Logs

General

Target

Contract.lnk
Size

1KB
MD5

8c6f5e59e0893edda9d21964d9f6612e
SHA1

f1bd5299ba068f6fe4d637176d13e49ad6df13a7
SHA256

6a0ba0135e16f41fc87dfd7ce52b74d12c77cf9768b6cc4ce2ac1c065d80c06a
SHA512

e87e4740e9e43eca047c6b5d7d8c42dccf4bd0a18452f33cb2c7080806bdf6054cbf4dcf1f6200e171545e0ccfaba636f78b0459909135ebd69e0bf1519941f1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
1⤵
PID:544

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/544-54-0x000007FEFBB21000-0x000007FEFBB23000-memory.dmp

Filesize
8KB

Download