df83a0141850ba352899bd7eaaac601d2e28fe742c4585f41bcd7d6f6fbd89b2 | Triage

Analysis

max time kernel
82s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2022 03:02

Sharing

Report Analysis Logs

General

Target

Contract.lnk
Size

1KB
MD5

8c6f5e59e0893edda9d21964d9f6612e
SHA1

f1bd5299ba068f6fe4d637176d13e49ad6df13a7
SHA256

6a0ba0135e16f41fc87dfd7ce52b74d12c77cf9768b6cc4ce2ac1c065d80c06a
SHA512

e87e4740e9e43eca047c6b5d7d8c42dccf4bd0a18452f33cb2c7080806bdf6054cbf4dcf1f6200e171545e0ccfaba636f78b0459909135ebd69e0bf1519941f1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
1⤵
PID:2372

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads