a22784bec3f10cfc307953f7b636d6d8d739d6ba5a400b4db9a31fab89afd3bc | Triage

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
26-09-2022 16:00

Sharing

Report Analysis Logs

General

Target

Art.lnk
Size

1KB
MD5

3e712abd9cb09a0a0d53e64799ec49a4
SHA1

c157db07381026729102856a48ebcac1bfaba787
SHA256

f80e6b298c2db439ff392e3ef3ec0bff2d39157e109bd51424f6270dec6e270f
SHA512

f5bd10c6893c20adf815ba67fa62eaf448986c0be30ca1b6938c60e4588a3ee68c628f5c997c7921f08cdf951be25d32ff4c27765d512b09feb3481bf8ba1838

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Art.lnk
1⤵
PID:1948

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-54-0x000007FEFBE41000-0x000007FEFBE43000-memory.dmp

Filesize
8KB

Download