f86130f5db481a165a9a20aeaf00c3efd66db7f52f7c9ef2efada96ee74f4913 | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-10-2022 12:27

Sharing

Report Analysis Logs

General

Target

Document.lnk
Size

1KB
MD5

f2c9190770432253163a889e5a46888d
SHA1

2405b9da4e14cae91bc5283286e5eab68a23b1c0
SHA256

84de4d7457a8cc16b1af1f90beb7e3e47ab0538887d3768e1f259af2dbcef693
SHA512

136252fb9315429c74539eb78209e5abbf9ecbb9624bbaba1caab693cb889eaf669f8bd805b2f77e88c6b0cda75f4008feb44037f7b1289ab1cac03486220372

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Document.lnk
1⤵
PID:1788

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1788-54-0x000007FEFB991000-0x000007FEFB993000-memory.dmp

Filesize
8KB

Download