51ae821d91650e31f18374ab75c5d5174a7506f1e9ce2ed293dec49f49b2b8e1 | Triage

Analysis

max time kernel
48s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
27-09-2022 19:05

Sharing

Report Analysis Logs

General

Target

Invoi_PDF.lnk
Size

1KB
MD5

5733f16301f251daeab78208d95aac34
SHA1

8ec60a49757f8422061194d5cf37f42b6927300d
SHA256

51ae821d91650e31f18374ab75c5d5174a7506f1e9ce2ed293dec49f49b2b8e1
SHA512

31d66d1a3d5b8eb20c8fb30567ae83d8485c51a6858f2348c11ead6f5edbb1f48b21cd78f1c61d60ca6cb40836ec845bb541dd8911a3ed33e70f70ae188d321d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Invoi_PDF.lnk
1⤵
PID:1328

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1328-54-0x000007FEFBC31000-0x000007FEFBC33000-memory.dmp

Filesize
8KB

Download