b62baca3a7c4ed612a99d2dc85c35d9c2b5794d112133eb7efe04a5f15f8cbb1 | Triage

Analysis

max time kernel
42s
max time network
150s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 21:22

Sharing

Report Analysis Logs

General

Target

b62baca3a7c4ed612a99d2dc85c35d9c2b5794d112133eb7efe04a5f15f8cbb1.lnk
Size

212B
MD5

80f1959ecdc619f04601a209ed032cc0
SHA1

a0d96d4fc79fd1e7b2a324b62352fb15c1f2ab6e
SHA256

b62baca3a7c4ed612a99d2dc85c35d9c2b5794d112133eb7efe04a5f15f8cbb1
SHA512

dcf544083fe8e2eb5af183ac5381c34fdee00e5a3a0c792a347c85a196fffbc9bceeeea0dfacb13704a1c3da169df9066e3c55feca949c60767c2cb356df37df

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\b62baca3a7c4ed612a99d2dc85c35d9c2b5794d112133eb7efe04a5f15f8cbb1.lnk
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1660-54-0x000007FEFBCE1000-0x000007FEFBCE3000-memory.dmp

Filesize
8KB

Download