Analysis
-
max time kernel
107s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/10/2022, 15:52
General
-
Target
documents.lnk
-
Size
1KB
-
MD5
b9533e3959a81772bdc94e9f6e7aed50
-
SHA1
c70b754b3283b2c66e4525412fa7dd0d087b3847
-
SHA256
ea5a45fa40c6494801b9073705695253d913271860df8d7cc8bd2e07ce3f98cd
-
SHA512
c40216e7807c2c8a4468c7564903f8a9e592a6b3436a6737db4f747345e15a8195caa36348270c21d30f6ad527cc1faeb97017ae3e7165c066aae854e32c0a8f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\documents.lnk1⤵