Analysis
-
max time kernel
153s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04-10-2022 07:33
General
-
Target
documents.lnk
-
Size
1KB
-
MD5
021d0df9835fec97fb0b9a0ac93ccaa1
-
SHA1
6d7d2a1f0017c2caed6f69a77a8cbbd2d11aa0a8
-
SHA256
20fab23051c67fd9ecc6f14ede135cf2a3b0bab2ef974f3e5fc89495dbf36a4d
-
SHA512
b78dd8dc602899cc2d78dec64c987a1fe84ec6e696cef71985bdc6d926361226c0997ae778760c9939be4dc49a400417e1a6f262360e75be709c578b788c76bd
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\documents.lnk1⤵