8e07849e4df4a8ed7807f06ec7b1641b7d0c92803a439c1061ecc1d423402866 | Triage

Analysis

max time kernel
41s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/10/2022, 17:19

Sharing

Report Analysis Logs

General

Target

Item.lnk
Size

1KB
MD5

f6f88a0957b587e595574ca8cfd9a10a
SHA1

9368058283eb380a9f40113285816c4331f6faa7
SHA256

7684f73c8a28ba24eb8f942ee918b703a40dfce694356b01a2f1fb023075aea4
SHA512

2d1057a53f3f0293ec4719e4e2c4e0346a317aafd89e33f7b4e27969f988ce630a5a3ec206ae910b542c1ccf50a0f7024c80827940787decf60365aa986d584f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Item.lnk
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-54-0x000007FEFB821000-0x000007FEFB823000-memory.dmp

Filesize
8KB

Download