98761de8cb4e91079b0c34a1e5558dba347d976fc0ab0250a9f66ad706a93db9 | Triage

Resubmissions

02/10/2022, 15:25

221002-stk51adhdn 10

30/09/2022, 13:52

220930-q6sdqsdga9 10

Analysis

max time kernel
34s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2022, 13:52

Sharing

Report Analysis Logs

General

Target

Invoi_PDF.lnk
Size

1KB
MD5

1e96f1218d05f15180dddbb97a276067
SHA1

0f41fedec8f6a4171b539129e525df7cf5f8963a
SHA256

4ad89eaa612f531842e4db4880f4d74316f24bd3b44616558c632acaf44b7d39
SHA512

c8def8d97382d0be000186e88a16610b2ff92b187078277d887c5a2fedaea1ee6d5863cfb182737aa07ad769baa4b602219e007d6822f013f1c570e8cd68588a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Invoi_PDF.lnk
1⤵
PID:3928

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads