Analysis
- max time kernel
42s - max time network
45s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
27/09/2022, 19:05
General
- Target Invoi_PDF.lnk
- Size 1KB
- Sample220927-xrhdjsfchm
- SHA256 51ae821d91650e31f18374ab75c5d5174a7506f1e9ce2ed293dec49f49b2b8e1
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Invoi_PDF.lnk1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/832-54-0x000007FEFB751000-0x000007FEFB753000-memory.dmp