6bbabdb59158473a60d8702f1751cb22d6b0b0eb8d350a269674242ec7fddfed | Triage

Analysis

max time kernel
36s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-10-2022 02:00

Sharing

Report Analysis Logs

General

Target

6bbabdb59158473a60d8702f1751cb22d6b0b0eb8d350a269674242ec7fddfed.lnk
Size

709B
MD5

6ec2fa3d0ec3735150e8a6004ec2504e
SHA1

49e6f8b5a5b28c3c40dfdc090d8241ee8712a9df
SHA256

6bbabdb59158473a60d8702f1751cb22d6b0b0eb8d350a269674242ec7fddfed
SHA512

91144cd5d8ffb716e847edf05766f5d1fc00a7ffacb678acc810de45006e4f9d5b3ec93459e3b4176e31e7c511a071c71c05ab23f1a324d3eb9c3d10e1bfb836

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\6bbabdb59158473a60d8702f1751cb22d6b0b0eb8d350a269674242ec7fddfed.lnk
1⤵
PID:1928

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1928-54-0x000007FEFC161000-0x000007FEFC163000-memory.dmp

Filesize
8KB

Download