3a6b8763626bdb1f75071647e8efeb1623e24c3031beef34cf47ccd28e6fae0a | Triage

Analysis

max time kernel
41s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-09-2022 12:21

Sharing

Report Analysis Logs

General

Target

GalleryA.lnk
Size

1KB
MD5

5c5c630b518d181866342f6cc243f432
SHA1

59fc0b31a3141e7490604417a04bc05b3dfd148b
SHA256

9b3825c8f51a81f29b4995506a6e5dea6f645634022c0172b943cf9d0f1fdb2b
SHA512

cc3b38484dad851685880937619775e504453601a0ed3442020b3e34272688e14e18eb7d2f82ca2d511fda4449f7ca2dadb4ed27bc3d5d00a71672bba059f4f1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\GalleryA.lnk
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-54-0x000007FEFB821000-0x000007FEFB823000-memory.dmp

Filesize
8KB

Download