c1efca753dedafb2fa206085cc45583e9af9e233a3248e958a5e1ece7982837f | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06-10-2022 16:07

Sharing

Report Analysis Logs

General

Target

Overdue.lnk
Size

1KB
MD5

dfa86146631771fbd7e584549c66d129
SHA1

854a8b619e52a7f54d86a1f21a58b0bbbea420da
SHA256

5f0e2ea9dd2937edc742420b739775bae7d89bac5f208eefbea44200ce2698ca
SHA512

aaa6e434cb8cafbb4c397745bf164fa0201922e582bb1c281165c4a210f96d470c5837ba9cef815ae06081a5038699abe59e70cf3fbd9fb7ce8549329f526530

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Overdue.lnk
1⤵
PID:1968

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-54-0x000007FEFB931000-0x000007FEFB933000-memory.dmp

Filesize
8KB

Download