7efe48cc66c67edf9ee025590228dbe6f2f1909b90123c4a2e0a359d3c67a2f2 | Triage

Analysis

max time kernel
43s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
17/10/2022, 14:45

Sharing

Report Analysis Logs

General

Target

Contract.lnk
Size

1KB
MD5

1d0492716ec244ba963e7a3d50feea87
SHA1

b4327b23022de7130bfd1f58ec12c265da9ba272
SHA256

421b51c775a4bc56fb033c3a92b5aa74a203c6e051368d8b78ccf7f58fd73f05
SHA512

53a43fdec426cb471e97f0c8259eebae622c116ad3fa30ad9882251694178d3371b51984bcf254da070a3b1a11004dab928c519ea54d20e0b2196a5cb703706a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
1⤵
PID:1048

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x000007FEFC281000-0x000007FEFC283000-memory.dmp

Filesize
8KB

Download