c93013a574683676b41caf0bbd42e9ac3ccfcc713f93d4dc71d7db0eaf41881d | Triage

Analysis

max time kernel
35s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2022 02:00

Sharing

Report Analysis Logs

General

Target

c93013a574683676b41caf0bbd42e9ac3ccfcc713f93d4dc71d7db0eaf41881d.lnk
Size

202B
MD5

6fb059e14d1c95df59735c8ff8055400
SHA1

5bf3b5084d3821423da0ccef7ed47c9e5e1ed703
SHA256

c93013a574683676b41caf0bbd42e9ac3ccfcc713f93d4dc71d7db0eaf41881d
SHA512

8d4bf7ce25ebcae0849c0c4e80502d4632ec71011b9a4d3dd05c8025b41b4a30b49b4efc435a13a89c20c359fb1901960e7716b1f59db2978a92cf522e442f2c

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\c93013a574683676b41caf0bbd42e9ac3ccfcc713f93d4dc71d7db0eaf41881d.lnk
1⤵
PID:4324

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads