8651428b81ec4b06c75283861a98cbfe6be280c65940bd632760fefc80f3f88e | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-10-2022 02:00

Sharing

Report Analysis Logs

General

Target

8651428b81ec4b06c75283861a98cbfe6be280c65940bd632760fefc80f3f88e.lnk
Size

196B
MD5

6eda3434a70cee9305e668d7b96bc710
SHA1

2948d4dbfc56bce474e80f0e000dbb7c916dd2ca
SHA256

8651428b81ec4b06c75283861a98cbfe6be280c65940bd632760fefc80f3f88e
SHA512

35a0dc51a10f8aec6b1b56e5897f31ebd44221054079f52887333ffe27f1327233a8518eee1b6c66419adb96ef866414ae14adabdd56f25c4a769e231137ffeb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\8651428b81ec4b06c75283861a98cbfe6be280c65940bd632760fefc80f3f88e.lnk
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1168-54-0x000007FEFC341000-0x000007FEFC343000-memory.dmp

Filesize
8KB

Download