8e6c4f2a35899b757c5e738362065e8d0f14c4c38556687cd8d5d9324a4e81ca | Triage

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 19:09

Sharing

Report Analysis Logs

General

Target

8e6c4f2a35899b757c5e738362065e8d0f14c4c38556687cd8d5d9324a4e81ca.lnk
Size

198B
MD5

1a04e36d93c687f6120b714e7255c2f0
SHA1

ac6aa9a70247afd4ba5d54dbc4785dc827073202
SHA256

8e6c4f2a35899b757c5e738362065e8d0f14c4c38556687cd8d5d9324a4e81ca
SHA512

0335fe648404789c6ab52104f9e2a4deff91fc8dea41c982ccdf805ca268131df23d7added1b0ad2523f780603046aff9ddd436d4cfb268c3b9748c66294a78b

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\8e6c4f2a35899b757c5e738362065e8d0f14c4c38556687cd8d5d9324a4e81ca.lnk
1⤵
PID:1388

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1388-54-0x000007FEFC331000-0x000007FEFC333000-memory.dmp

Filesize
8KB

Download