e6fefbe96372f8cc3baeac2343af5438367cfcfe4469d1187911bfe65e900224 | Triage

Analysis

max time kernel
45s
max time network
129s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 03:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e6fefbe96372f8cc3baeac2343af5438367cfcfe4469d1187911bfe65e900224.lnk
Size

194B
MD5

6176112a5458406e33099ff269bf54f0
SHA1

7150e961ab61832c4a67b287eb884e3e7b916a4a
SHA256

e6fefbe96372f8cc3baeac2343af5438367cfcfe4469d1187911bfe65e900224
SHA512

1eb73d28907f40d88ca9e4fe2a51b3a1fed5240b351b8d025627a3c6dafb083d54d796b3f93c15b0811d3132a63fda54878ccd81ad0fcfcd6f0431727952c033

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\e6fefbe96372f8cc3baeac2343af5438367cfcfe4469d1187911bfe65e900224.lnk
1⤵
PID:536

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/536-54-0x000007FEFBC61000-0x000007FEFBC63000-memory.dmp

Filesize
8KB

Download