aff0c6f19168fdb34a201bf3c8b676177243887505794ae07e7cba4d241bdbf6 | Triage

Analysis

max time kernel
37s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 21:22

Sharing

Report Analysis Logs

General

Target

aff0c6f19168fdb34a201bf3c8b676177243887505794ae07e7cba4d241bdbf6.lnk
Size

196B
MD5

75fcef2ed23b5aea712b93d0d9b21730
SHA1

6beac652d7b51b52f4241d89c8635e3b1fd9d13d
SHA256

aff0c6f19168fdb34a201bf3c8b676177243887505794ae07e7cba4d241bdbf6
SHA512

2420f4841fc02d487ce58657ed6f6f7e96ffdfdf69e44e696f38ece0d22f2ed3fd60dab155a08b5c0db9557ed7bfb8952a4aeb733762212ae3701b03fdfddc49

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\aff0c6f19168fdb34a201bf3c8b676177243887505794ae07e7cba4d241bdbf6.lnk
1⤵
PID:1164

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1164-54-0x000007FEFB5B1000-0x000007FEFB5B3000-memory.dmp

Filesize
8KB

Download