Analysis
-
max time kernel
229s -
max time network
294s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
27-09-2022 18:59
General
-
Target
Invoi_PDF.lnk
-
Size
1KB
-
MD5
33f0ecc3b42e9c3beef822535ae21dc4
-
SHA1
8ceeb00b6e1804ee3be59b4d2d0761ae4de60afc
-
SHA256
ffa08cf40816590855814b800c06c5ebc4afd0e5c0930658938533758bacc70d
-
SHA512
ac5f6e0483c5dff68fd7276750223ce4ab72da46c67d3522cacbc13a6fb9d338e15d06b7b5056ddaa8d3e7429b159a5c5a69d204b8b3cf5862bf48142d10e66b
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Invoi_PDF.lnk1⤵