f697006a372a6cc017f6fccb414a040d293a493e50f784f51a95d67483f7d528 | Triage

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 00:14

Sharing

Report Analysis Logs

General

Target

f697006a372a6cc017f6fccb414a040d293a493e50f784f51a95d67483f7d528.lnk
Size

627B
MD5

82927aa8ebea90188131327a0b817630
SHA1

d3911bf26209376f0bccaac52e1101bc97fede5b
SHA256

f697006a372a6cc017f6fccb414a040d293a493e50f784f51a95d67483f7d528
SHA512

cc0d1fc13baa2b029bc41c91ae11c617b7b5c25a2610a150c203fd6f2d5a83fda6e6b92cd5a7d0a06a1d250241b4efd95ab4cee4b44b4654a34377e978c77ec3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\f697006a372a6cc017f6fccb414a040d293a493e50f784f51a95d67483f7d528.lnk
1⤵
PID:1696

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1696-54-0x000007FEFC2F1000-0x000007FEFC2F3000-memory.dmp

Filesize
8KB

Download