Overview

overview

10

Static

static

Contract.lnk

windows7-x64

3

Contract.lnk

windows10-2004-x64

3

unbelt/fifty.dll

windows7-x64

10

unbelt/fifty.dll

windows10-2004-x64

10

unbelt/pre...ing.js

windows7-x64

3

unbelt/pre...ing.js

windows10-2004-x64

1

unbelt/tic...ly.cmd

windows7-x64

1

unbelt/tic...ly.cmd

windows10-2004-x64

1

Analysis

  • max time kernel
    47s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    26-09-2022 12:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Contract.lnk

  • Size

    1KB

  • MD5

    f3e825cec397bb04069f39ae8819d8c3

  • SHA1

    6ddb23f253d793ddd8941576788233115b6b47df

  • SHA256

    aa71ba24c476c5d51ddd54df09f3309ee767b1892b93ca4f035b43b8ef7dba7d

  • SHA512

    9fb73edc4c609366cb1bbfe0a1fc3455d882275e3c78d7801f11ec9efdc4fc4f8b1854915dec3ce163b1a8d0d9ae3ce006e004001ca7d0ecb2d9bd7b9ebf9fa5

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
    1⤵
      PID:860

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Initial Access

    Execution

    Persistence

    Privilege Escalation

    Defense Evasion

    Credential Access

    Discovery

    System Information Discovery

    1
    T1082

    Lateral Movement

    Collection

    Exfiltration

    Command and Control

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/860-54-0x000007FEFB741000-0x000007FEFB743000-memory.dmp
      Filesize

      8KB

      Download