Analysis
-
max time kernel
92s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/10/2022, 23:24
General
-
Target
edcf4d5366c83ba74be44c041db217c6d8f8ac1fce659cdcf33377cc8e85e38e.lnk
-
Size
194B
-
MD5
799134b4841839216af83d3ababbeb40
-
SHA1
8d31cea9664106ee64f0cc090a5353757cded510
-
SHA256
edcf4d5366c83ba74be44c041db217c6d8f8ac1fce659cdcf33377cc8e85e38e
-
SHA512
7ea9f837e1440e90b2316c09326abadf581069d9708fef019fd3322cb016aba720614dd18eb74e17c8a093ab6464d8889f742fdfe96eb834bee4f2156aa4ebf5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\edcf4d5366c83ba74be44c041db217c6d8f8ac1fce659cdcf33377cc8e85e38e.lnk1⤵